[Tue Sep 01 03:07:16.352376 2026] [proxy_fcgi:error] [pid 17952:tid 140446403639040] [client 38.242.149.127:57890] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:12:57.099358 2026] [proxy_fcgi:error] [pid 10272:tid 140446319712000] [client 68.183.236.56:53214] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:23:54.714205 2026] [authz_core:error] [pid 6411:tid 140353443960576] [client 185.203.168.215:32528] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Tue Sep 01 03:31:24.357127 2026] [proxy_fcgi:error] [pid 9194:tid 140353298466560] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:24.497815 2026] [proxy_fcgi:error] [pid 9194:tid 140353315251968] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:24.639332 2026] [proxy_fcgi:error] [pid 9194:tid 140353323644672] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:24.922772 2026] [proxy_fcgi:error] [pid 9194:tid 140353281681152] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:25.064418 2026] [proxy_fcgi:error] [pid 9194:tid 140353340430080] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:25.346173 2026] [proxy_fcgi:error] [pid 9194:tid 140353348822784] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:25.770461 2026] [proxy_fcgi:error] [pid 9194:tid 140353264895744] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:25.912989 2026] [proxy_fcgi:error] [pid 9194:tid 140353214539520] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:26.054198 2026] [proxy_fcgi:error] [pid 9194:tid 140353357215488] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:26.336054 2026] [proxy_fcgi:error] [pid 9194:tid 140353180968704] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:26.756686 2026] [proxy_fcgi:error] [pid 9194:tid 140353256503040] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:27.322625 2026] [proxy_fcgi:error] [pid 9194:tid 140353273288448] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:27.603609 2026] [proxy_fcgi:error] [pid 9194:tid 140353348822784] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:27.744318 2026] [proxy_fcgi:error] [pid 9194:tid 140353443960576] [client 158.23.184.117:1096] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:31:27.883892 2026] [:error] [pid 9194:tid 140353189361408] [client 158.23.184.117:1096] [client 158.23.184.117] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.pesema.com"] [uri "/wp-admin/css/colors/modern/my.php"] [unique_id "apaNX4dqWCmIAB5WEG_6UwAAARc"]
[Tue Sep 01 03:31:28.019957 2026] [:error] [pid 9194:tid 140353231324928] [client 158.23.184.117:1096] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/install.php"] [unique_id "apaNYIdqWCmIAB5WEG_6VAAAARI"]
[Tue Sep 01 03:31:28.570677 2026] [:error] [pid 6411:tid 140353197754112] [client 158.23.184.117:1509] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/baxa1.php"] [unique_id "apaNYK-5XxGfLhlq8xk_MwAAANY"]
[Tue Sep 01 03:31:29.118043 2026] [:error] [pid 9194:tid 140353323644672] [client 158.23.184.117:1499] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/text.php"] [unique_id "apaNYYdqWCmIAB5WEG_6VwAAAQc"]
[Tue Sep 01 03:31:29.666117 2026] [:error] [pid 6091:tid 140353306859264] [client 158.23.184.117:1504] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apaNYckVYOXruxV21N7BNQAAAIk"]
[Tue Sep 01 03:31:30.214733 2026] [:error] [pid 6411:tid 140353189361408] [client 158.23.184.117:1532] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-setting.php"] [unique_id "apaNYq-5XxGfLhlq8xk_PQAAANc"]
[Tue Sep 01 03:31:30.764042 2026] [:error] [pid 9194:tid 140353348822784] [client 158.23.184.117:1529] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/css/colors/sunrise/sc.php"] [unique_id "apaNYodqWCmIAB5WEG_6WgAAAQQ"]
[Tue Sep 01 03:31:31.310130 2026] [:error] [pid 6089:tid 140353340430080] [client 158.23.184.117:1871] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "apaNY5jeM2TaVrIYSc-HSwAAAAU"]
[Tue Sep 01 03:31:31.858083 2026] [:error] [pid 6089:tid 140353239717632] [client 158.23.184.117:1498] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/uploads/wc-logs/"] [unique_id "apaNY5jeM2TaVrIYSc-HTAAAABE"]
[Tue Sep 01 03:31:32.406938 2026] [:error] [pid 6411:tid 140353281681152] [client 158.23.184.117:1512] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apaNZK-5XxGfLhlq8xk_TAAAAMw"]
[Tue Sep 01 03:31:32.955986 2026] [:error] [pid 9194:tid 140353222932224] [client 158.23.184.117:1117] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/files.php"] [unique_id "apaNZIdqWCmIAB5WEG_6XwAAARM"]
[Tue Sep 01 03:31:33.505587 2026] [:error] [pid 6411:tid 140353273288448] [client 158.23.184.117:1518] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/xl2023.php"] [unique_id "apaNZa-5XxGfLhlq8xk_VAAAAM0"]
[Tue Sep 01 03:31:34.058144 2026] [:error] [pid 9194:tid 140353197754112] [client 158.23.184.117:1118] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/222.php"] [unique_id "apaNZodqWCmIAB5WEG_6YAAAARY"]
[Tue Sep 01 03:31:34.609185 2026] [:error] [pid 9194:tid 140353206146816] [client 158.23.184.117:1496] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/mani."] [unique_id "apaNZodqWCmIAB5WEG_6YgAAARU"]
[Tue Sep 01 03:31:35.158115 2026] [:error] [pid 6411:tid 140353348822784] [client 158.23.184.117:1514] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apaNZ6-5XxGfLhlq8xk_ZAAAAMQ"]
[Tue Sep 01 03:31:35.703972 2026] [:error] [pid 9194:tid 140353290073856] [client 158.23.184.117:1500] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/mr.php"] [unique_id "apaNZ4dqWCmIAB5WEG_6YwAAAQs"]
[Tue Sep 01 03:31:36.255542 2026] [:error] [pid 6411:tid 140353180968704] [client 158.23.184.117:1476] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/plugins/ninja-forms/randkeyword.php"] [unique_id "apaNaK-5XxGfLhlq8xk_bQAAANg"]
[Tue Sep 01 03:31:36.815875 2026] [:error] [pid 9194:tid 140353340430080] [client 158.23.184.117:1100] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/IXR/"] [unique_id "apaNaIdqWCmIAB5WEG_6ZQAAAQU"]
[Tue Sep 01 03:31:37.364001 2026] [:error] [pid 6091:tid 140353197754112] [client 158.23.184.117:1091] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/includes/colour.php"] [unique_id "apaNackVYOXruxV21N7BNwAAAJY"]
[Tue Sep 01 03:31:37.912265 2026] [:error] [pid 9194:tid 140353443960576] [client 158.23.184.117:1535] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/radio.php"] [unique_id "apaNaYdqWCmIAB5WEG_6ZgAAAQE"]
[Tue Sep 01 03:31:38.459413 2026] [:error] [pid 9194:tid 140353348822784] [client 158.23.184.117:1089] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/error.php"] [unique_id "apaNaodqWCmIAB5WEG_6aAAAAQQ"]
[Tue Sep 01 03:31:39.005679 2026] [:error] [pid 6091:tid 140353323644672] [client 158.23.184.117:1111] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/Requests.php"] [unique_id "apaNa8kVYOXruxV21N7BOAAAAIc"]
[Tue Sep 01 03:31:39.552960 2026] [:error] [pid 6411:tid 140353306859264] [client 158.23.184.117:1121] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/options-general.php"] [unique_id "apaNa6-5XxGfLhlq8xk_iQAAAMk"]
[Tue Sep 01 03:31:40.100575 2026] [:error] [pid 6090:tid 140353306859264] [client 158.23.184.117:1115] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/network"] [unique_id "apaNbLPf1VxWhFqgvWun9gAAAEk"]
[Tue Sep 01 03:31:40.648121 2026] [:error] [pid 6089:tid 140353281681152] [client 158.23.184.117:1527] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/1.php"] [unique_id "apaNbJjeM2TaVrIYSc-HTQAAAAw"]
[Tue Sep 01 03:31:41.196447 2026] [:error] [pid 6091:tid 140353306859264] [client 158.23.184.117:1519] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/.well-known/my.php"] [unique_id "apaNbckVYOXruxV21N7BOwAAAIk"]
[Tue Sep 01 03:31:41.745352 2026] [:error] [pid 6411:tid 140353281681152] [client 158.23.184.117:1134] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/api.php"] [unique_id "apaNba-5XxGfLhlq8xk_mQAAAMw"]
[Tue Sep 01 03:31:42.295194 2026] [:error] [pid 6091:tid 140353189361408] [client 158.23.184.117:1146] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/.well-known/error.php"] [unique_id "apaNbskVYOXruxV21N7BPAAAAJc"]
[Tue Sep 01 03:31:42.842105 2026] [:error] [pid 9194:tid 140353315251968] [client 158.23.184.117:1522] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/check.php"] [unique_id "apaNbodqWCmIAB5WEG_6bAAAAQg"]
[Tue Sep 01 03:31:43.394586 2026] [:error] [pid 6091:tid 140353443960576] [client 158.23.184.117:1889] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wso.php"] [unique_id "apaNb8kVYOXruxV21N7BPQAAAIE"]
[Tue Sep 01 03:31:43.947484 2026] [:error] [pid 9194:tid 140353231324928] [client 158.23.184.117:1107] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/aa.php"] [unique_id "apaNb4dqWCmIAB5WEG_6bgAAARI"]
[Tue Sep 01 03:31:44.493668 2026] [:error] [pid 6090:tid 140353248110336] [client 158.23.184.117:1530] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/.well-known/home.php"] [unique_id "apaNcLPf1VxWhFqgvWun9wAAAFA"]
[Tue Sep 01 03:31:45.039693 2026] [:error] [pid 6411:tid 140353452353280] [client 158.23.184.117:1088] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/.well-known/aa.php"] [unique_id "apaNca-5XxGfLhlq8xk_tQAAAMA"]
[Tue Sep 01 03:58:51.311809 2026] [proxy_fcgi:error] [pid 6090:tid 140353248110336] [client 188.132.197.109:34474] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 05:40:19.731731 2026] [:error] [pid 9194:tid 140353332037376] [client 43.153.19.83:35554] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apark4dqWCmIAB5WEG9IygAAAQY"]
[Tue Sep 01 06:15:27.755725 2026] [proxy_fcgi:error] [pid 28500:tid 140353273288448] [client 68.183.236.56:39508] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 06:27:21.767498 2026] [:error] [pid 28194:tid 140353239717632] [client 43.164.0.21:41472] [client 43.164.0.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apa2mQdz-EN0cDNAEVIOIAAAAVE"]
[Tue Sep 01 06:51:56.402541 2026] [:error] [pid 6089:tid 140353332037376] [client 43.136.86.241:37226] [client 43.136.86.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apa8XJjeM2TaVrIYSc_YRgAAAAY"]
[Tue Sep 01 07:19:02.476472 2026] [proxy_fcgi:error] [pid 11529:tid 140353214539520] [client 183.111.125.26:53698] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 07:41:22.031420 2026] [proxy_fcgi:error] [pid 6090:tid 140353264895744] [client 68.183.236.56:57368] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:00:46.994194 2026] [proxy_fcgi:error] [pid 6091:tid 140353306859264] [client 168.144.255.123:59942] AH01071: Got error 'Primary script unknown', referer: https://wordpress.org/
[Tue Sep 01 08:00:54.068780 2026] [proxy_fcgi:error] [pid 28194:tid 140353298466560] [client 168.144.255.123:62389] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/search?q=wordpress
[Tue Sep 01 08:43:50.006627 2026] [proxy_fcgi:error] [pid 28500:tid 140353435567872] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:50.112524 2026] [proxy_fcgi:error] [pid 28500:tid 140353214539520] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:50.218121 2026] [proxy_fcgi:error] [pid 28500:tid 140353290073856] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:50.323158 2026] [proxy_fcgi:error] [pid 28500:tid 140353340430080] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:50.427737 2026] [proxy_fcgi:error] [pid 28500:tid 140353231324928] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:50.533544 2026] [proxy_fcgi:error] [pid 28500:tid 140353452353280] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:50.640103 2026] [proxy_fcgi:error] [pid 28500:tid 140353357215488] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:50.745231 2026] [proxy_fcgi:error] [pid 28500:tid 140353197754112] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:50.850924 2026] [proxy_fcgi:error] [pid 28500:tid 140353323644672] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:50.955648 2026] [proxy_fcgi:error] [pid 28500:tid 140353239717632] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:51.061162 2026] [proxy_fcgi:error] [pid 28500:tid 140353273288448] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:51.166296 2026] [proxy_fcgi:error] [pid 28500:tid 140353189361408] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:51.271762 2026] [proxy_fcgi:error] [pid 28500:tid 140353443960576] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:51.377530 2026] [proxy_fcgi:error] [pid 28500:tid 140353222932224] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:51.483185 2026] [proxy_fcgi:error] [pid 28500:tid 140353332037376] [client 4.204.224.164:63250] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:51.584441 2026] [:error] [pid 28500:tid 140353281681152] [client 4.204.224.164:63250] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(^|/)(\\\\.env($|[/?])|\\\\.git/|aw\\\\.php$|adminfuns\\\\.php$|xmrlpc\\\\.php$|unzipper\\\\.php$|alfa\\\\.php$|alfanew\\\\.php$)" at REQUEST_URI. [file "/usr/local/apache/conf.d/zzz-security-hardening.conf"] [line "26"] [id "110001"] [msg "CWP-Hardening: Scanner/webshell probe blocked"] [hostname "pesema.com"] [uri "/adminfuns.php"] [unique_id "apbWlzQYUm0S3Gh9Jn_PNQAAAYw"]
[Tue Sep 01 08:43:51.799168 2026] [proxy_fcgi:error] [pid 6411:tid 140353264895744] [client 4.204.224.164:63349] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:51.902561 2026] [proxy_fcgi:error] [pid 6411:tid 140353348822784] [client 4.204.224.164:63349] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:52.006407 2026] [proxy_fcgi:error] [pid 6411:tid 140353231324928] [client 4.204.224.164:63349] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:52.110534 2026] [proxy_fcgi:error] [pid 6411:tid 140353189361408] [client 4.204.224.164:63349] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:52.214142 2026] [proxy_fcgi:error] [pid 6411:tid 140353197754112] [client 4.204.224.164:63349] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:52.317538 2026] [proxy_fcgi:error] [pid 6411:tid 140353256503040] [client 4.204.224.164:63349] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:52.421634 2026] [proxy_fcgi:error] [pid 6411:tid 140353452353280] [client 4.204.224.164:63349] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:52.525973 2026] [proxy_fcgi:error] [pid 6411:tid 140353443960576] [client 4.204.224.164:63349] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:52.629932 2026] [proxy_fcgi:error] [pid 6411:tid 140353214539520] [client 4.204.224.164:63349] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:52.733226 2026] [proxy_fcgi:error] [pid 6411:tid 140353435567872] [client 4.204.224.164:63349] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:43:52.733353 2026] [:error] [pid 6411:tid 140353435567872] [client 4.204.224.164:63349] [client 4.204.224.164] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/reop3.php"] [unique_id "apbWmK-5XxGfLhlq8xmZdwAAAMI"]
[Tue Sep 01 08:43:52.832866 2026] [:error] [pid 6411:tid 140353206146816] [client 4.204.224.164:63349] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/2d7433/index.php"] [unique_id "apbWmK-5XxGfLhlq8xmZeAAAANU"]
[Tue Sep 01 08:43:53.034346 2026] [:error] [pid 28194:tid 140353348822784] [client 4.204.224.164:63312] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/classwithtostring.php"] [unique_id "apbWmQdz-EN0cDNAEVIymQAAAUQ"]
[Tue Sep 01 08:43:53.236677 2026] [:error] [pid 6090:tid 140353315251968] [client 4.204.224.164:63282] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/simple.php"] [unique_id "apbWmbPf1VxWhFqgvWvwUwAAAEg"]
[Tue Sep 01 08:43:53.446500 2026] [:error] [pid 28194:tid 140353452353280] [client 4.204.224.164:63324] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "apbWmQdz-EN0cDNAEVIymgAAAUA"]
[Tue Sep 01 08:43:53.649139 2026] [:error] [pid 28500:tid 140353264895744] [client 4.204.224.164:63285] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "apbWmTQYUm0S3Gh9Jn_PNwAAAY4"]
[Tue Sep 01 08:43:53.849342 2026] [:error] [pid 28500:tid 140353340430080] [client 4.204.224.164:63340] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/goods.php"] [unique_id "apbWmTQYUm0S3Gh9Jn_POAAAAYU"]
[Tue Sep 01 08:43:54.049861 2026] [:error] [pid 6090:tid 140353340430080] [client 4.204.224.164:63257] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/btx25.php"] [unique_id "apbWmrPf1VxWhFqgvWvwVAAAAEU"]
[Tue Sep 01 08:43:54.255252 2026] [:error] [pid 11529:tid 140353180968704] [client 4.204.224.164:63303] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/radio.php"] [unique_id "apbWmi580fjDz1VV6yduQgAAAdg"]
[Tue Sep 01 08:43:54.458196 2026] [:error] [pid 28500:tid 140353273288448] [client 4.204.224.164:63276] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dex.php"] [unique_id "apbWmjQYUm0S3Gh9Jn_POwAAAY0"]
[Tue Sep 01 08:43:54.660570 2026] [:error] [pid 9194:tid 140353332037376] [client 4.204.224.164:63306] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/replace.php"] [unique_id "apbWmodqWCmIAB5WEG9qWAAAAQY"]
[Tue Sep 01 08:43:54.859481 2026] [:error] [pid 28500:tid 140353222932224] [client 4.204.224.164:63346] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gulu.php"] [unique_id "apbWmjQYUm0S3Gh9Jn_PPAAAAZM"]
[Tue Sep 01 08:43:55.061507 2026] [:error] [pid 11529:tid 140353189361408] [client 4.204.224.164:63311] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ioxi-o.php"] [unique_id "apbWmy580fjDz1VV6yduQwAAAdc"]
[Tue Sep 01 08:43:55.262205 2026] [:error] [pid 29615:tid 140353239717632] [client 4.204.224.164:63252] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file.php"] [unique_id "apbWm51PBa8fnDJM-t642wAAAhE"]
[Tue Sep 01 08:43:55.466627 2026] [:error] [pid 6411:tid 140353306859264] [client 4.204.224.164:63336] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bless.php"] [unique_id "apbWm6-5XxGfLhlq8xmZegAAAMk"]
[Tue Sep 01 08:43:55.669806 2026] [:error] [pid 6090:tid 140353298466560] [client 4.204.224.164:63476] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file32.php"] [unique_id "apbWm7Pf1VxWhFqgvWvwVQAAAEo"]
[Tue Sep 01 08:43:55.869193 2026] [:error] [pid 6090:tid 140353306859264] [client 4.204.224.164:63309] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/class20.php"] [unique_id "apbWm7Pf1VxWhFqgvWvwVwAAAEk"]
[Tue Sep 01 08:43:56.070536 2026] [:error] [pid 6090:tid 140353239717632] [client 4.204.224.164:63304] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wso.php"] [unique_id "apbWnLPf1VxWhFqgvWvwWAAAAFE"]
[Tue Sep 01 08:43:56.275101 2026] [:error] [pid 6090:tid 140353443960576] [client 4.204.224.164:63259] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/blurbs.php"] [unique_id "apbWnLPf1VxWhFqgvWvwWgAAAEE"]
[Tue Sep 01 08:43:56.481580 2026] [:error] [pid 28194:tid 140353290073856] [client 4.204.224.164:63335] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/av.php"] [unique_id "apbWnAdz-EN0cDNAEVIymwAAAUs"]
[Tue Sep 01 08:43:56.685898 2026] [:error] [pid 11529:tid 140353443960576] [client 4.204.224.164:63286] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/abcd.php"] [unique_id "apbWnC580fjDz1VV6yduRQAAAcE"]
[Tue Sep 01 08:43:56.892171 2026] [:error] [pid 29615:tid 140353222932224] [client 4.204.224.164:63348] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apbWnJ1PBa8fnDJM-t643QAAAhM"]
[Tue Sep 01 08:43:57.097926 2026] [:error] [pid 29615:tid 140353206146816] [client 4.204.224.164:63330] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cong.php"] [unique_id "apbWnZ1PBa8fnDJM-t643wAAAhU"]
[Tue Sep 01 08:43:57.304538 2026] [:error] [pid 6411:tid 140353281681152] [client 4.204.224.164:63350] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file61.php"] [unique_id "apbWna-5XxGfLhlq8xmZewAAAMw"]
[Tue Sep 01 08:43:57.510687 2026] [:error] [pid 29615:tid 140353340430080] [client 4.204.224.164:63248] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file59.php"] [unique_id "apbWnZ1PBa8fnDJM-t644AAAAgU"]
[Tue Sep 01 08:43:57.723221 2026] [:error] [pid 9194:tid 140353273288448] [client 4.204.224.164:63263] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/test2.php"] [unique_id "apbWnYdqWCmIAB5WEG9qXAAAAQ0"]
[Tue Sep 01 08:43:57.922177 2026] [:error] [pid 6411:tid 140353239717632] [client 4.204.224.164:63266] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/test01.php"] [unique_id "apbWna-5XxGfLhlq8xmZfAAAANE"]
[Tue Sep 01 08:43:58.124846 2026] [:error] [pid 6091:tid 140353273288448] [client 4.204.224.164:63261] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file31.php"] [unique_id "apbWnskVYOXruxV21N4S9wAAAI0"]
[Tue Sep 01 08:43:58.342070 2026] [:error] [pid 28500:tid 140353315251968] [client 4.204.224.164:55128] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file2.php"] [unique_id "apbWnjQYUm0S3Gh9Jn_PPgAAAYg"]
[Tue Sep 01 08:43:58.545858 2026] [:error] [pid 6091:tid 140353443960576] [client 4.204.224.164:63333] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ai.php"] [unique_id "apbWnskVYOXruxV21N4S-AAAAIE"]
[Tue Sep 01 09:23:01.213721 2026] [:error] [pid 6091:tid 140353452353280] [client 104.28.222.47:60359] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup"] [unique_id "apbfxckVYOXruxV21N4WNgAAAIA"]
[Tue Sep 01 09:23:01.219615 2026] [:error] [pid 6091:tid 140353298466560] [client 104.28.222.47:60363] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "apbfxckVYOXruxV21N4WNwAAAIo"], referer: https://www.google.com/search?q=www.pesema.com
[Tue Sep 01 09:23:01.240863 2026] [:error] [pid 6411:tid 140353273288448] [client 104.28.222.47:60362] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dist"] [unique_id "apbfxa-5XxGfLhlq8xmk4gAAAM0"], referer: https://www.google.com/search?q=www.pesema.com
[Tue Sep 01 09:23:01.245950 2026] [:error] [pid 28194:tid 140353452353280] [client 104.28.222.47:60342] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp-config.php"] [unique_id "apbfxQdz-EN0cDNAEVI3FgAAAUA"], referer: https://www.google.com/search?q=www.pesema.com
[Tue Sep 01 09:23:01.247415 2026] [:error] [pid 6411:tid 140353264895744] [client 104.28.222.47:60361] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.old"] [unique_id "apbfxa-5XxGfLhlq8xmk5AAAAM4"], referer: https://www.google.com/search?q=www.pesema.com
[Tue Sep 01 09:23:01.252054 2026] [:error] [pid 28194:tid 140353323644672] [client 104.28.222.46:64201] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.sample"] [unique_id "apbfxQdz-EN0cDNAEVI3GAAAAUc"], referer: https://www.google.com/search?q=www.pesema.com
[Tue Sep 01 09:23:01.257152 2026] [:error] [pid 6411:tid 140353222932224] [client 104.28.222.46:16842] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env"] [unique_id "apbfxa-5XxGfLhlq8xmk5QAAANM"]
[Tue Sep 01 09:23:01.263981 2026] [:error] [pid 6411:tid 140353180968704] [client 104.28.222.47:60371] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp-config.php.bak"] [unique_id "apbfxa-5XxGfLhlq8xmk5gAAANg"], referer: https://www.google.com/search?q=www.pesema.com
[Tue Sep 01 09:23:01.288339 2026] [:error] [pid 6090:tid 140353281681152] [client 104.28.222.46:16845] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.local"] [unique_id "apbfxbPf1VxWhFqgvWv3YwAAAEw"]
[Tue Sep 01 09:43:39.005168 2026] [:error] [pid 29615:tid 140353290073856] [client 43.157.62.101:41714] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apbkm51PBa8fnDJM-t6_PwAAAgs"]
[Tue Sep 01 10:00:59.567738 2026] [proxy_fcgi:error] [pid 6411:tid 140353298466560] [client 158.23.184.117:15186] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:00:59.709877 2026] [proxy_fcgi:error] [pid 6411:tid 140353435567872] [client 158.23.184.117:15186] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:00:59.855192 2026] [proxy_fcgi:error] [pid 6411:tid 140353273288448] [client 158.23.184.117:15186] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:01:00.139202 2026] [proxy_fcgi:error] [pid 6411:tid 140353239717632] [client 158.23.184.117:15186] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:01:00.420785 2026] [proxy_fcgi:error] [pid 6411:tid 140353348822784] [client 158.23.184.117:15186] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:01:01.405928 2026] [proxy_fcgi:error] [pid 6411:tid 140353248110336] [client 158.23.184.117:15186] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:01:02.107734 2026] [proxy_fcgi:error] [pid 6411:tid 140353214539520] [client 158.23.184.117:15186] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:01:02.666982 2026] [proxy_fcgi:error] [pid 6411:tid 140353306859264] [client 158.23.184.117:15186] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:01:02.808313 2026] [proxy_fcgi:error] [pid 6411:tid 140353206146816] [client 158.23.184.117:15186] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:01:03.088949 2026] [:error] [pid 6411:tid 140353435567872] [client 158.23.184.117:15186] [client 158.23.184.117] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "apbor6-5XxGfLhlq8xmwJgAAAMI"]
[Tue Sep 01 10:01:03.225186 2026] [:error] [pid 6411:tid 140353273288448] [client 158.23.184.117:15186] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/themes/twentytwentyfive/functions.php"] [unique_id "apbor6-5XxGfLhlq8xmwJwAAAM0"]
[Tue Sep 01 10:01:03.775494 2026] [:error] [pid 29615:tid 140353443960576] [client 158.23.184.117:15211] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/wp-admins.php"] [unique_id "apbor51PBa8fnDJM-t7B9QAAAgE"]
[Tue Sep 01 10:01:04.324774 2026] [:error] [pid 6090:tid 140353348822784] [client 158.23.184.117:15131] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/user/profile.php"] [unique_id "apbosLPf1VxWhFqgvWv_WAAAAEQ"]
[Tue Sep 01 10:01:04.873352 2026] [:error] [pid 29615:tid 140353290073856] [client 158.23.184.117:15156] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin/admin.php"] [unique_id "apbosJ1PBa8fnDJM-t7B9gAAAgs"]
[Tue Sep 01 10:01:05.423959 2026] [:error] [pid 6090:tid 140353180968704] [client 158.23.184.117:15124] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/languages/plugins/admin.php"] [unique_id "apbosbPf1VxWhFqgvWv_WgAAAFg"]
[Tue Sep 01 10:01:05.972613 2026] [:error] [pid 28500:tid 140353214539520] [client 158.23.184.117:15176] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/storage/"] [unique_id "apbosTQYUm0S3Gh9Jn_q0wAAAZQ"]
[Tue Sep 01 10:01:06.523121 2026] [:error] [pid 6411:tid 140353222932224] [client 158.23.184.117:15128] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/user.php"] [unique_id "apbosq-5XxGfLhlq8xmwKwAAANM"]
[Tue Sep 01 10:01:07.072696 2026] [:error] [pid 28500:tid 140353298466560] [client 158.23.184.117:15220] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "apboszQYUm0S3Gh9Jn_q1AAAAYo"]
[Tue Sep 01 10:01:07.624797 2026] [:error] [pid 6411:tid 140353189361408] [client 158.23.184.117:60673] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public.php"] [unique_id "apbos6-5XxGfLhlq8xmwLAAAANc"]
[Tue Sep 01 10:01:08.184559 2026] [:error] [pid 6091:tid 140353222932224] [client 158.23.184.117:15191] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/images/media/"] [unique_id "apbotMkVYOXruxV21N4aVQAAAJM"]
[Tue Sep 01 10:01:08.737119 2026] [:error] [pid 6411:tid 140353315251968] [client 158.23.184.117:15209] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/colors.php"] [unique_id "apbotK-5XxGfLhlq8xmwLwAAAMg"]
[Tue Sep 01 10:01:09.288385 2026] [:error] [pid 29615:tid 140353256503040] [client 158.23.184.117:15203] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-include.php"] [unique_id "apbotZ1PBa8fnDJM-t7B-AAAAg8"]
[Tue Sep 01 10:01:09.839865 2026] [:error] [pid 28500:tid 140353180968704] [client 158.23.184.117:15105] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/checker.php"] [unique_id "apbotTQYUm0S3Gh9Jn_q1wAAAZg"]
[Tue Sep 01 10:01:10.388615 2026] [:error] [pid 28500:tid 140353452353280] [client 158.23.184.117:15106] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "apbotjQYUm0S3Gh9Jn_q2gAAAYA"]
[Tue Sep 01 10:01:10.939268 2026] [:error] [pid 6411:tid 140353273288448] [client 158.23.184.117:15228] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-logs.php"] [unique_id "apbotq-5XxGfLhlq8xmwMgAAAM0"]
[Tue Sep 01 10:01:11.490032 2026] [:error] [pid 28194:tid 140353256503040] [client 158.23.184.117:15118] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/themes/file.php"] [unique_id "apbotwdz-EN0cDNAEVI9VQAAAU8"]
[Tue Sep 01 10:01:12.038614 2026] [:error] [pid 6411:tid 140353197754112] [client 158.23.184.117:15144] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/.well-known/rk2.php"] [unique_id "apbouK-5XxGfLhlq8xmwMwAAANY"]
[Tue Sep 01 10:01:12.590433 2026] [:error] [pid 6091:tid 140353452353280] [client 158.23.184.117:14672] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gecko-new.php"] [unique_id "apbouMkVYOXruxV21N4aWQAAAIA"]
[Tue Sep 01 10:01:13.185171 2026] [:error] [pid 29615:tid 140353222932224] [client 158.23.184.117:15198] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/health.php"] [unique_id "apbouZ1PBa8fnDJM-t7B-wAAAhM"]
[Tue Sep 01 10:01:13.738813 2026] [:error] [pid 11529:tid 140353273288448] [client 158.23.184.117:15185] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/inc.php"] [unique_id "apbouS580fjDz1VV6yd15QAAAc0"]
[Tue Sep 01 10:01:14.294015 2026] [:error] [pid 29615:tid 140353197754112] [client 158.23.184.117:15194] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/s.php"] [unique_id "apboup1PBa8fnDJM-t7B_AAAAhY"]
[Tue Sep 01 10:01:14.842690 2026] [:error] [pid 28500:tid 140353306859264] [client 158.23.184.117:15207] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/uploads/index.php"] [unique_id "apboujQYUm0S3Gh9Jn_q3wAAAYk"]
[Tue Sep 01 10:01:15.392701 2026] [:error] [pid 9194:tid 140353443960576] [client 158.23.184.117:15184] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/shop.php"] [unique_id "apbou4dqWCmIAB5WEG916QAAAQE"]
[Tue Sep 01 10:01:15.940237 2026] [:error] [pid 11529:tid 140353323644672] [client 158.23.184.117:14687] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/data.php"] [unique_id "apbouy580fjDz1VV6yd15wAAAcc"]
[Tue Sep 01 10:01:16.492309 2026] [:error] [pid 6411:tid 140353264895744] [client 158.23.184.117:14678] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/task.php"] [unique_id "apbovK-5XxGfLhlq8xmwNgAAAM4"]
[Tue Sep 01 10:01:17.044411 2026] [:error] [pid 6411:tid 140353315251968] [client 158.23.184.117:14681] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/radio.php"] [unique_id "apbova-5XxGfLhlq8xmwNwAAAMg"]
[Tue Sep 01 10:01:17.592229 2026] [:error] [pid 9194:tid 140353231324928] [client 158.23.184.117:15182] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin.php"] [unique_id "apbovYdqWCmIAB5WEG916wAAARI"]
[Tue Sep 01 10:01:18.142505 2026] [:error] [pid 6090:tid 140353435567872] [client 158.23.184.117:15180] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/header.php"] [unique_id "apbovrPf1VxWhFqgvWv_YAAAAEI"]
[Tue Sep 01 10:01:18.691269 2026] [:error] [pid 9194:tid 140353298466560] [client 158.23.184.117:14698] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apbovodqWCmIAB5WEG917QAAAQo"]
[Tue Sep 01 10:01:19.243109 2026] [:error] [pid 6411:tid 140353323644672] [client 158.23.184.117:14708] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/.bod/.ll/"] [unique_id "apbov6-5XxGfLhlq8xmwOAAAAMc"]
[Tue Sep 01 10:01:19.794814 2026] [:error] [pid 29615:tid 140353239717632] [client 158.23.184.117:14662] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin.php"] [unique_id "apbov51PBa8fnDJM-t7B_QAAAhE"]
[Tue Sep 01 10:32:59.164987 2026] [proxy_fcgi:error] [pid 6411:tid 140353248110336] [client 20.104.49.130:7276] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:32:59.268994 2026] [proxy_fcgi:error] [pid 6411:tid 140353197754112] [client 20.104.49.130:7276] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:32:59.373381 2026] [proxy_fcgi:error] [pid 6411:tid 140353315251968] [client 20.104.49.130:7276] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:32:59.476934 2026] [proxy_fcgi:error] [pid 6411:tid 140353231324928] [client 20.104.49.130:7276] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:32:59.580802 2026] [proxy_fcgi:error] [pid 6411:tid 140353281681152] [client 20.104.49.130:7276] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:32:59.683792 2026] [proxy_fcgi:error] [pid 6411:tid 140353306859264] [client 20.104.49.130:7276] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 10:35:49.451421 2026] [:error] [pid 6089:tid 140353443960576] [client 43.157.158.178:49524] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apbw1ZjeM2TaVrIYSc8eawAAAAE"]
[Tue Sep 01 10:58:56.110094 2026] [proxy_fcgi:error] [pid 6090:tid 140353248110336] [client 45.8.205.255:51216] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 11:43:03.011266 2026] [:error] [pid 6091:tid 140353298466560] [client 20.48.250.41:61779] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apcAl8kVYOXruxV21N4j8gAAAIo"]
[Tue Sep 01 11:43:03.215040 2026] [:error] [pid 6411:tid 140353290073856] [client 20.48.250.41:61768] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apcAl6-5XxGfLhlq8xnGQwAAAMs"]
[Tue Sep 01 11:43:03.457259 2026] [:error] [pid 6091:tid 140353348822784] [client 20.48.250.41:61710] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fsfrl.php"] [unique_id "apcAl8kVYOXruxV21N4j8wAAAIQ"]
[Tue Sep 01 11:43:03.690357 2026] [:error] [pid 11529:tid 140353443960576] [client 20.48.250.41:58562] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xrp.php"] [unique_id "apcAly580fjDz1VV6yeDpwAAAcE"]
[Tue Sep 01 11:43:03.923541 2026] [:error] [pid 11529:tid 140353256503040] [client 20.48.250.41:61783] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zwso.php"] [unique_id "apcAly580fjDz1VV6yeDqAAAAc8"]
[Tue Sep 01 11:43:04.158609 2026] [:error] [pid 6411:tid 140353281681152] [client 20.48.250.41:61733] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mar.php"] [unique_id "apcAmK-5XxGfLhlq8xnGRQAAAMw"]
[Tue Sep 01 11:43:04.390161 2026] [:error] [pid 28500:tid 140353222932224] [client 20.48.250.41:61815] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/3.php"] [unique_id "apcAmDQYUm0S3Gh9Jn8HpQAAAZM"]
[Tue Sep 01 11:43:04.591870 2026] [:error] [pid 6089:tid 140353315251968] [client 20.48.250.41:61785] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/css.php"] [unique_id "apcAmJjeM2TaVrIYSc8yhgAAAAg"]
[Tue Sep 01 11:43:04.845768 2026] [:error] [pid 9194:tid 140353340430080] [client 20.48.250.41:61769] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/samll.php"] [unique_id "apcAmIdqWCmIAB5WEG-CWgAAAQU"]
[Tue Sep 01 11:43:05.073524 2026] [:error] [pid 6089:tid 140353248110336] [client 20.48.250.41:61743] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/js.php"] [unique_id "apcAmZjeM2TaVrIYSc8yjAAAABA"]
[Tue Sep 01 11:43:05.283973 2026] [:error] [pid 11529:tid 140353340430080] [client 20.48.250.41:61729] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/go.php"] [unique_id "apcAmS580fjDz1VV6yeDqwAAAcU"]
[Tue Sep 01 11:43:05.543927 2026] [:error] [pid 11529:tid 140353323644672] [client 20.48.250.41:61812] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/esp.php"] [unique_id "apcAmS580fjDz1VV6yeDrAAAAcc"]
[Tue Sep 01 11:43:05.746626 2026] [:error] [pid 6090:tid 140353248110336] [client 20.48.250.41:61773] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ho.php"] [unique_id "apcAmbPf1VxWhFqgvWsN6gAAAFA"]
[Tue Sep 01 11:43:05.956752 2026] [:error] [pid 29615:tid 140353214539520] [client 20.48.250.41:61720] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bhigtouj.php"] [unique_id "apcAmZ1PBa8fnDJM-t7QQQAAAhQ"]
[Tue Sep 01 11:43:06.293158 2026] [:error] [pid 9194:tid 140353332037376] [client 20.48.250.41:58580] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cilus.php"] [unique_id "apcAmodqWCmIAB5WEG-CWwAAAQY"]
[Tue Sep 01 11:43:06.508730 2026] [:error] [pid 28500:tid 140353323644672] [client 20.48.250.41:61745] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/.cache.php"] [unique_id "apcAmjQYUm0S3Gh9Jn8HpwAAAYc"]
[Tue Sep 01 11:43:06.896237 2026] [:error] [pid 29615:tid 140353357215488] [client 20.48.250.41:61725] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/UT6UJndefault.php"] [unique_id "apcAmp1PBa8fnDJM-t7QQgAAAgM"]
[Tue Sep 01 11:43:07.204309 2026] [:error] [pid 29615:tid 140353290073856] [client 20.48.250.41:58565] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/tvbxn.php"] [unique_id "apcAm51PBa8fnDJM-t7QQwAAAgs"]
[Tue Sep 01 11:43:07.448330 2026] [:error] [pid 11529:tid 140353239717632] [client 20.48.250.41:58564] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bn.php"] [unique_id "apcAmy580fjDz1VV6yeDrQAAAdE"]
[Tue Sep 01 11:43:07.678132 2026] [:error] [pid 6090:tid 140353443960576] [client 20.48.250.41:61754] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aqotrjkg.php"] [unique_id "apcAm7Pf1VxWhFqgvWsN7AAAAEE"]
[Tue Sep 01 11:43:07.906730 2026] [:error] [pid 6090:tid 140353315251968] [client 20.48.250.41:61818] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/curldect.php"] [unique_id "apcAm7Pf1VxWhFqgvWsN7QAAAEg"]
[Tue Sep 01 11:43:08.130827 2026] [:error] [pid 6090:tid 140353273288448] [client 20.48.250.41:61770] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/w1px.php"] [unique_id "apcAnLPf1VxWhFqgvWsN7gAAAE0"]
[Tue Sep 01 11:43:08.387347 2026] [:error] [pid 28500:tid 140353206146816] [client 20.48.250.41:61707] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xmini4.php"] [unique_id "apcAnDQYUm0S3Gh9Jn8HqAAAAZU"]
[Tue Sep 01 11:43:08.592439 2026] [:error] [pid 11529:tid 140353443960576] [client 20.48.250.41:61714] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ccc.php"] [unique_id "apcAnC580fjDz1VV6yeDsAAAAcE"]
[Tue Sep 01 11:43:08.842515 2026] [:error] [pid 29615:tid 140353452353280] [client 20.48.250.41:58571] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/accesson.php"] [unique_id "apcAnJ1PBa8fnDJM-t7QRAAAAgA"]
[Tue Sep 01 11:43:09.045597 2026] [:error] [pid 6411:tid 140353264895744] [client 20.48.250.41:61696] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/000.php"] [unique_id "apcAna-5XxGfLhlq8xnGRgAAAM4"]
[Tue Sep 01 11:43:09.251948 2026] [:error] [pid 11529:tid 140353256503040] [client 20.48.250.41:61810] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/29.php"] [unique_id "apcAnS580fjDz1VV6yeDswAAAc8"]
[Tue Sep 01 11:43:09.478516 2026] [:error] [pid 6411:tid 140353306859264] [client 20.48.250.41:61703] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/faiy.php"] [unique_id "apcAna-5XxGfLhlq8xnGRwAAAMk"]
[Tue Sep 01 11:43:09.847694 2026] [:error] [pid 6411:tid 140353206146816] [client 20.48.250.41:61737] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ho.php"] [unique_id "apcAna-5XxGfLhlq8xnGSAAAANU"]
[Tue Sep 01 11:43:10.126201 2026] [:error] [pid 29615:tid 140353332037376] [client 20.48.250.41:61821] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/e219b53abbindex.php"] [unique_id "apcAnp1PBa8fnDJM-t7QRQAAAgY"]
[Tue Sep 01 11:43:10.377096 2026] [:error] [pid 28194:tid 140353273288448] [client 20.48.250.41:61761] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/XrdbXydefault.php"] [unique_id "apcAngdz-EN0cDNAEVJKYQAAAU0"]
[Tue Sep 01 11:43:10.594113 2026] [:error] [pid 11529:tid 140353340430080] [client 20.48.250.41:61822] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/82.php"] [unique_id "apcAni580fjDz1VV6yeDtgAAAcU"]
[Tue Sep 01 11:43:10.819578 2026] [:error] [pid 28500:tid 140353248110336] [client 20.48.250.41:61723] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/20.php"] [unique_id "apcAnjQYUm0S3Gh9Jn8HqwAAAZA"]
[Tue Sep 01 11:43:11.040287 2026] [:error] [pid 6089:tid 140353298466560] [client 20.48.250.41:58569] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a65.php"] [unique_id "apcAn5jeM2TaVrIYSc8ywwAAAAo"]
[Tue Sep 01 11:43:11.279783 2026] [:error] [pid 28500:tid 140353180968704] [client 20.48.250.41:61735] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ilex.php"] [unique_id "apcAnzQYUm0S3Gh9Jn8HrAAAAZg"]
[Tue Sep 01 11:43:11.643575 2026] [:error] [pid 6089:tid 140353189361408] [client 20.48.250.41:61777] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pqfpcelx.php"] [unique_id "apcAn5jeM2TaVrIYSc8yxwAAABc"]
[Tue Sep 01 11:43:11.845943 2026] [:error] [pid 6411:tid 140353340430080] [client 20.48.250.41:61747] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/f35.update.php"] [unique_id "apcAn6-5XxGfLhlq8xnGSgAAAMU"]
[Tue Sep 01 11:43:12.078848 2026] [:error] [pid 6090:tid 140353290073856] [client 20.48.250.41:58591] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zoo1.php"] [unique_id "apcAoLPf1VxWhFqgvWsN8QAAAEs"]
[Tue Sep 01 11:43:12.308676 2026] [:error] [pid 28194:tid 140353256503040] [client 20.48.250.41:61791] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ot.php"] [unique_id "apcAoAdz-EN0cDNAEVJKYwAAAU8"]
[Tue Sep 01 11:43:12.517576 2026] [:error] [pid 29615:tid 140353256503040] [client 20.48.250.41:61808] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/edorxrr.php"] [unique_id "apcAoJ1PBa8fnDJM-t7QRgAAAg8"]
[Tue Sep 01 11:43:12.722045 2026] [:error] [pid 9194:tid 140353443960576] [client 20.48.250.41:58560] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zoo2.php"] [unique_id "apcAoIdqWCmIAB5WEG-CXAAAAQE"]
[Tue Sep 01 11:43:12.921502 2026] [:error] [pid 28194:tid 140353435567872] [client 20.48.250.41:61739] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hywzd.php"] [unique_id "apcAoAdz-EN0cDNAEVJKZAAAAUI"]
[Tue Sep 01 11:43:13.203861 2026] [:error] [pid 28500:tid 140353435567872] [client 20.48.250.41:61744] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/simple.php"] [unique_id "apcAoTQYUm0S3Gh9Jn8HrQAAAYI"]
[Tue Sep 01 11:43:13.417574 2026] [:error] [pid 28194:tid 140353323644672] [client 20.48.250.41:61772] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/acf1ced8aec2.php"] [unique_id "apcAoQdz-EN0cDNAEVJKZQAAAUc"]
[Tue Sep 01 11:43:13.620972 2026] [:error] [pid 28500:tid 140353222932224] [client 20.48.250.41:61807] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-trackback.php"] [unique_id "apcAoTQYUm0S3Gh9Jn8HrgAAAZM"]
[Tue Sep 01 11:43:13.834622 2026] [:error] [pid 28500:tid 140353315251968] [client 20.48.250.41:61765] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/coffe.php"] [unique_id "apcAoTQYUm0S3Gh9Jn8HrwAAAYg"]
[Tue Sep 01 11:43:14.079592 2026] [:error] [pid 9194:tid 140353273288448] [client 20.48.250.41:61713] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/goods.php"] [unique_id "apcAoodqWCmIAB5WEG-CXQAAAQ0"]
[Tue Sep 01 11:43:14.291092 2026] [:error] [pid 28194:tid 140353443960576] [client 20.48.250.41:58506] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/asax.php"] [unique_id "apcAogdz-EN0cDNAEVJKZgAAAUE"]
[Tue Sep 01 11:43:14.491797 2026] [:error] [pid 6090:tid 140353323644672] [client 20.48.250.41:61793] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cjhnp.php"] [unique_id "apcAorPf1VxWhFqgvWsN8wAAAEc"]
[Tue Sep 01 11:43:14.703072 2026] [:error] [pid 9194:tid 140353306859264] [client 20.48.250.41:61700] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jlex.php"] [unique_id "apcAoodqWCmIAB5WEG-CXgAAAQk"]
[Tue Sep 01 11:43:14.903965 2026] [:error] [pid 11529:tid 140353435567872] [client 20.48.250.41:61782] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kerang.php"] [unique_id "apcAoi580fjDz1VV6yeDugAAAcI"]
[Tue Sep 01 11:43:15.109247 2026] [:error] [pid 28194:tid 140353357215488] [client 20.48.250.41:61709] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/local.php"] [unique_id "apcAowdz-EN0cDNAEVJKZwAAAUM"]
[Tue Sep 01 11:43:15.311869 2026] [:error] [pid 29615:tid 140353323644672] [client 20.48.250.41:61796] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kbqhb.php"] [unique_id "apcAo51PBa8fnDJM-t7QRwAAAgc"]
[Tue Sep 01 12:14:43.996545 2026] [:error] [pid 28194:tid 140353256503040] [client 20.104.49.130:26161] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apcIAwdz-EN0cDNAEVJOCAAAAU8"]
[Tue Sep 01 12:14:48.581204 2026] [:error] [pid 11529:tid 140353452353280] [client 20.104.49.130:26149] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apcICC580fjDz1VV6yePZgAAAcA"]
[Tue Sep 01 12:14:49.548102 2026] [:error] [pid 6411:tid 140353323644672] [client 20.104.49.130:26113] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/o.php"] [unique_id "apcICa-5XxGfLhlq8xnLRQAAAMc"]
[Tue Sep 01 12:14:50.365078 2026] [:error] [pid 28500:tid 140353298466560] [client 20.104.49.130:26056] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/RsR.php"] [unique_id "apcICjQYUm0S3Gh9Jn8NtQAAAYo"]
[Tue Sep 01 12:14:51.155953 2026] [:error] [pid 9194:tid 140353323644672] [client 20.104.49.130:26158] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/2020.php"] [unique_id "apcIC4dqWCmIAB5WEG-E6gAAAQc"]
[Tue Sep 01 12:14:51.669099 2026] [:error] [pid 29615:tid 140353315251968] [client 20.104.49.130:26120] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/t.php"] [unique_id "apcIC51PBa8fnDJM-t7TggAAAgg"]
[Tue Sep 01 12:14:52.026023 2026] [:error] [pid 28500:tid 140353340430080] [client 20.104.49.130:26166] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/amax.php"] [unique_id "apcIDDQYUm0S3Gh9Jn8NtgAAAYU"]
[Tue Sep 01 12:14:52.379288 2026] [:error] [pid 29615:tid 140353443960576] [client 20.104.49.130:26167] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/akismet.php"] [unique_id "apcIDJ1PBa8fnDJM-t7TgwAAAgE"]
[Tue Sep 01 12:14:52.814318 2026] [:error] [pid 28194:tid 140353357215488] [client 20.104.49.130:26139] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/customize.php"] [unique_id "apcIDAdz-EN0cDNAEVJOCwAAAUM"]
[Tue Sep 01 12:14:53.580740 2026] [:error] [pid 28194:tid 140353206146816] [client 20.104.49.130:26127] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/domvf.php"] [unique_id "apcIDQdz-EN0cDNAEVJODAAAAVU"]
[Tue Sep 01 12:14:54.336166 2026] [:error] [pid 29615:tid 140353256503040] [client 20.104.49.130:26135] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/link.php"] [unique_id "apcIDp1PBa8fnDJM-t7ThAAAAg8"]
[Tue Sep 01 12:14:55.213534 2026] [:error] [pid 9194:tid 140353231324928] [client 20.104.49.130:26130] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file3.php"] [unique_id "apcID4dqWCmIAB5WEG-E7gAAARI"]
[Tue Sep 01 12:14:55.979620 2026] [:error] [pid 29615:tid 140353435567872] [client 20.104.49.130:26170] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/asd67.php"] [unique_id "apcID51PBa8fnDJM-t7TiQAAAgI"]
[Tue Sep 01 12:14:56.421772 2026] [:error] [pid 11529:tid 140353281681152] [client 20.104.49.130:26051] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/first.php"] [unique_id "apcIEC580fjDz1VV6yePbwAAAcw"]
[Tue Sep 01 12:14:57.282269 2026] [:error] [pid 28500:tid 140353197754112] [client 20.104.49.130:26121] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bdroot.php"] [unique_id "apcIETQYUm0S3Gh9Jn8NuQAAAZY"]
[Tue Sep 01 12:14:58.295790 2026] [:error] [pid 11529:tid 140353231324928] [client 20.104.49.130:26164] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp5.php"] [unique_id "apcIEi580fjDz1VV6yePcgAAAdI"]
[Tue Sep 01 12:14:59.290938 2026] [:error] [pid 11529:tid 140353443960576] [client 20.104.49.130:26163] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hehe.php"] [unique_id "apcIEy580fjDz1VV6yePcwAAAcE"]
[Tue Sep 01 12:14:59.715558 2026] [:error] [pid 11529:tid 140353323644672] [client 20.104.49.130:26137] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a1.php"] [unique_id "apcIEy580fjDz1VV6yePdQAAAcc"]
[Tue Sep 01 12:15:00.094533 2026] [:error] [pid 6090:tid 140353264895744] [client 20.104.49.130:26049] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file17.php"] [unique_id "apcIFLPf1VxWhFqgvWsSKQAAAE4"]
[Tue Sep 01 12:15:01.220338 2026] [:error] [pid 28500:tid 140353273288448] [client 20.104.49.130:26064] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php_load.php"] [unique_id "apcIFTQYUm0S3Gh9Jn8NvgAAAY0"]
[Tue Sep 01 12:15:01.902914 2026] [:error] [pid 9194:tid 140353206146816] [client 20.104.49.130:26133] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dox.php"] [unique_id "apcIFYdqWCmIAB5WEG-E8wAAARU"]
[Tue Sep 01 12:15:02.775834 2026] [:error] [pid 6411:tid 140353256503040] [client 20.104.49.130:26129] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/docs.php"] [unique_id "apcIFq-5XxGfLhlq8xnLUwAAAM8"]
[Tue Sep 01 12:15:03.228431 2026] [:error] [pid 28500:tid 140353248110336] [client 20.104.49.130:26048] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/privdayz.php"] [unique_id "apcIFzQYUm0S3Gh9Jn8NwwAAAZA"]
[Tue Sep 01 12:15:03.791521 2026] [:error] [pid 6089:tid 140353264895744] [client 20.104.49.130:26147] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/category.php"] [unique_id "apcIF5jeM2TaVrIYSc86ZQAAAA4"]
[Tue Sep 01 12:15:04.338985 2026] [:error] [pid 11529:tid 140353357215488] [client 20.104.49.130:26074] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/av.php"] [unique_id "apcIGC580fjDz1VV6yePfQAAAcM"]
[Tue Sep 01 12:15:04.688341 2026] [:error] [pid 28500:tid 140353214539520] [client 20.104.49.130:26052] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/small.php"] [unique_id "apcIGDQYUm0S3Gh9Jn8NxwAAAZQ"]
[Tue Sep 01 12:15:05.066210 2026] [:error] [pid 6089:tid 140353323644672] [client 20.104.49.130:26143] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/about/goods.php"] [unique_id "apcIGZjeM2TaVrIYSc86awAAAAc"]
[Tue Sep 01 12:15:06.043812 2026] [:error] [pid 28194:tid 140353239717632] [client 20.104.49.130:26116] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/congeree.php"] [unique_id "apcIGgdz-EN0cDNAEVJOFgAAAVE"]
[Tue Sep 01 12:15:06.418819 2026] [:error] [pid 11529:tid 140353189361408] [client 20.104.49.130:26067] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/666666.php"] [unique_id "apcIGi580fjDz1VV6yePigAAAdc"]
[Tue Sep 01 12:15:07.094985 2026] [:error] [pid 11529:tid 140353231324928] [client 20.104.49.130:26150] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/navbar.php"] [unique_id "apcIGy580fjDz1VV6yePjgAAAdI"]
[Tue Sep 01 12:15:07.912554 2026] [:error] [pid 9194:tid 140353332037376] [client 20.104.49.130:26146] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lala.php"] [unique_id "apcIG4dqWCmIAB5WEG-E9QAAAQY"]
[Tue Sep 01 12:15:08.628140 2026] [:error] [pid 11529:tid 140353239717632] [client 20.104.49.130:26174] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/css.php"] [unique_id "apcIHC580fjDz1VV6yePkQAAAdE"]
[Tue Sep 01 12:15:09.017027 2026] [:error] [pid 11529:tid 140353180968704] [client 20.104.49.130:26112] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/plss3.php"] [unique_id "apcIHS580fjDz1VV6yePlAAAAdg"]
[Tue Sep 01 12:15:09.715971 2026] [:error] [pid 6091:tid 140353348822784] [client 20.104.49.130:26075] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phina.php"] [unique_id "apcIHckVYOXruxV21N4negAAAIQ"]
[Tue Sep 01 12:15:11.834197 2026] [:error] [pid 28194:tid 140353452353280] [client 20.104.49.130:26155] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/87.php"] [unique_id "apcIHwdz-EN0cDNAEVJOGgAAAUA"]
[Tue Sep 01 12:15:25.610094 2026] [:error] [pid 9194:tid 140353306859264] [client 20.104.49.130:26144] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hosty.php"] [unique_id "apcILYdqWCmIAB5WEG-E-AAAAQk"]
[Tue Sep 01 12:15:30.365184 2026] [:error] [pid 11529:tid 140353357215488] [client 20.104.49.130:26060] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo01.php"] [unique_id "apcIMi580fjDz1VV6yePqwAAAcM"]
[Tue Sep 01 12:15:33.584758 2026] [:error] [pid 11529:tid 140353239717632] [client 20.104.49.130:26156] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kedi.php"] [unique_id "apcINS580fjDz1VV6yePswAAAdE"]
[Tue Sep 01 12:15:46.928075 2026] [:error] [pid 9194:tid 140353248110336] [client 20.104.49.130:26072] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apcIQodqWCmIAB5WEG-FBAAAARA"]
[Tue Sep 01 12:15:48.815263 2026] [:error] [pid 11529:tid 140353348822784] [client 20.104.49.130:26152] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/doc.php"] [unique_id "apcIRC580fjDz1VV6yePvQAAAcQ"]
[Tue Sep 01 12:15:50.135384 2026] [:error] [pid 6090:tid 140353231324928] [client 20.104.49.130:26069] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file21.php"] [unique_id "apcIRrPf1VxWhFqgvWsSQgAAAFI"]
[Tue Sep 01 12:15:59.382483 2026] [:error] [pid 9194:tid 140353315251968] [client 20.104.49.130:9690] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apcIT4dqWCmIAB5WEG-FCwAAAQg"]
[Tue Sep 01 12:16:01.913033 2026] [:error] [pid 6090:tid 140353306859264] [client 20.104.49.130:26050] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/register.php"] [unique_id "apcIUbPf1VxWhFqgvWsSQwAAAEk"]
[Tue Sep 01 12:16:02.767097 2026] [:error] [pid 11529:tid 140353323644672] [client 20.104.49.130:26160] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/atex1.php"] [unique_id "apcIUi580fjDz1VV6yePxgAAAcc"]
[Tue Sep 01 12:16:02.934272 2026] [:error] [pid 6411:tid 140353290073856] [client 20.104.49.130:9711] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apcIUq-5XxGfLhlq8xnLbgAAAMs"]
[Tue Sep 01 12:16:03.578368 2026] [:error] [pid 6411:tid 140353306859264] [client 20.104.49.130:26310] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/oc460l3x.php"] [unique_id "apcIU6-5XxGfLhlq8xnLbwAAAMk"]
[Tue Sep 01 12:16:04.020546 2026] [:error] [pid 6089:tid 140353264895744] [client 20.104.49.130:26102] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lm15.php"] [unique_id "apcIVJjeM2TaVrIYSc86ogAAAA4"]
[Tue Sep 01 12:16:04.878926 2026] [:error] [pid 29615:tid 140353348822784] [client 20.104.49.130:26317] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/drykl.php"] [unique_id "apcIVJ1PBa8fnDJM-t7ToAAAAgQ"]
[Tue Sep 01 12:16:05.727222 2026] [:error] [pid 29615:tid 140353306859264] [client 20.104.49.130:26328] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fns.php"] [unique_id "apcIVZ1PBa8fnDJM-t7ToQAAAgk"]
[Tue Sep 01 12:16:06.151824 2026] [:error] [pid 6089:tid 140353443960576] [client 20.104.49.130:9291] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/o.php"] [unique_id "apcIVpjeM2TaVrIYSc86pAAAAAE"]
[Tue Sep 01 12:16:06.535798 2026] [:error] [pid 6090:tid 140353206146816] [client 20.104.49.130:26119] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/333.php"] [unique_id "apcIVrPf1VxWhFqgvWsSRAAAAFU"]
[Tue Sep 01 12:16:07.017219 2026] [:error] [pid 6089:tid 140353340430080] [client 20.104.49.130:26080] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpi.php"] [unique_id "apcIV5jeM2TaVrIYSc86pQAAAAU"]
[Tue Sep 01 12:16:07.567415 2026] [:error] [pid 6091:tid 140353231324928] [client 20.104.49.130:26140] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/25.php"] [unique_id "apcIV8kVYOXruxV21N4njAAAAJI"]
[Tue Sep 01 12:16:07.850551 2026] [:error] [pid 6091:tid 140353180968704] [client 20.104.49.130:26099] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bengi.php"] [unique_id "apcIV8kVYOXruxV21N4njQAAAJg"]
[Tue Sep 01 12:16:08.293054 2026] [:error] [pid 6089:tid 140353281681152] [client 20.104.49.130:26311] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/server-info.php"] [unique_id "apcIWJjeM2TaVrIYSc86pgAAAAw"]
[Tue Sep 01 12:16:09.026381 2026] [:error] [pid 6411:tid 140353222932224] [client 20.104.49.130:9354] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/RsR.php"] [unique_id "apcIWa-5XxGfLhlq8xnLdAAAANM"]
[Tue Sep 01 12:16:09.337056 2026] [:error] [pid 11529:tid 140353357215488] [client 20.104.49.130:26336] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nlnub.php"] [unique_id "apcIWS580fjDz1VV6yePzAAAAcM"]
[Tue Sep 01 12:16:09.747769 2026] [:error] [pid 11529:tid 140353239717632] [client 20.104.49.130:26092] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/124.php"] [unique_id "apcIWS580fjDz1VV6yePzQAAAdE"]
[Tue Sep 01 12:16:10.029604 2026] [:error] [pid 6089:tid 140353452353280] [client 20.104.49.130:26154] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gnmlc.php"] [unique_id "apcIWpjeM2TaVrIYSc86pwAAAAA"]
[Tue Sep 01 12:16:10.147105 2026] [:error] [pid 11529:tid 140353298466560] [client 20.104.49.130:9671] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/2020.php"] [unique_id "apcIWi580fjDz1VV6yePzgAAAco"]
[Tue Sep 01 12:16:10.312749 2026] [:error] [pid 11529:tid 140353189361408] [client 20.104.49.130:26153] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/png.php"] [unique_id "apcIWi580fjDz1VV6yePzwAAAdc"]
[Tue Sep 01 12:16:10.594420 2026] [:error] [pid 6089:tid 140353306859264] [client 20.104.49.130:26162] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/error_log.php"] [unique_id "apcIWpjeM2TaVrIYSc86qAAAAAk"]
[Tue Sep 01 12:16:10.907942 2026] [:error] [pid 28194:tid 140353214539520] [client 20.104.49.130:9391] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/t.php"] [unique_id "apcIWgdz-EN0cDNAEVJOMAAAAVQ"]
[Tue Sep 01 12:16:11.038417 2026] [:error] [pid 28500:tid 140353315251968] [client 20.104.49.130:26306] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/saml.php"] [unique_id "apcIWzQYUm0S3Gh9Jn8N8gAAAYg"]
[Tue Sep 01 12:16:16.694347 2026] [:error] [pid 28500:tid 140353214539520] [client 20.104.49.130:9301] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/amax.php"] [unique_id "apcIYDQYUm0S3Gh9Jn8N-wAAAZQ"]
[Tue Sep 01 12:16:19.786301 2026] [:error] [pid 6089:tid 140353189361408] [client 20.104.49.130:9673] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/akismet.php"] [unique_id "apcIY5jeM2TaVrIYSc86rgAAABc"]
[Tue Sep 01 12:16:20.808281 2026] [:error] [pid 28194:tid 140353323644672] [client 20.104.49.130:9324] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/customize.php"] [unique_id "apcIZAdz-EN0cDNAEVJOMwAAAUc"]
[Tue Sep 01 12:16:22.947428 2026] [:error] [pid 6411:tid 140353290073856] [client 20.104.49.130:10135] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/domvf.php"] [unique_id "apcIZq-5XxGfLhlq8xnLeQAAAMs"]
[Tue Sep 01 12:16:23.800989 2026] [:error] [pid 11529:tid 140353264895744] [client 20.104.49.130:26171] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cp2.php"] [unique_id "apcIZy580fjDz1VV6yeP5AAAAc4"]
[Tue Sep 01 12:16:24.335781 2026] [:error] [pid 11529:tid 140353306859264] [client 20.104.49.130:9718] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/link.php"] [unique_id "apcIaC580fjDz1VV6yeP5wAAAck"]
[Tue Sep 01 12:16:25.205757 2026] [:error] [pid 11529:tid 140353248110336] [client 20.104.49.130:26070] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ms-edit.php"] [unique_id "apcIaS580fjDz1VV6yeP6AAAAdA"]
[Tue Sep 01 12:16:26.063654 2026] [:error] [pid 11529:tid 140353452353280] [client 20.104.49.130:26054] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/test1.php"] [unique_id "apcIai580fjDz1VV6yeP6gAAAcA"]
[Tue Sep 01 12:16:26.429070 2026] [:error] [pid 11529:tid 140353180968704] [client 20.104.49.130:9338] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file3.php"] [unique_id "apcIai580fjDz1VV6yeP6wAAAdg"]
[Tue Sep 01 12:16:26.979599 2026] [:error] [pid 9194:tid 140353290073856] [client 20.104.49.130:26100] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fraro.php"] [unique_id "apcIaodqWCmIAB5WEG-FEQAAAQs"]
[Tue Sep 01 12:16:27.579929 2026] [:error] [pid 11529:tid 140353443960576] [client 20.104.49.130:26086] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/otuz1.php"] [unique_id "apcIay580fjDz1VV6yeP7AAAAcE"]
[Tue Sep 01 12:16:28.061992 2026] [:error] [pid 11529:tid 140353298466560] [client 20.104.49.130:26065] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/4563.php"] [unique_id "apcIbC580fjDz1VV6yeP7gAAAco"]
[Tue Sep 01 12:16:28.399780 2026] [:error] [pid 11529:tid 140353206146816] [client 20.104.49.130:26324] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminfus.php"] [unique_id "apcIbC580fjDz1VV6yeP7wAAAdU"]
[Tue Sep 01 12:16:28.583333 2026] [:error] [pid 6091:tid 140353357215488] [client 20.104.49.130:9708] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/asd67.php"] [unique_id "apcIbMkVYOXruxV21N4nmQAAAIM"]
[Tue Sep 01 12:16:28.944246 2026] [:error] [pid 6089:tid 140353197754112] [client 20.104.49.130:26073] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sale.php"] [unique_id "apcIbJjeM2TaVrIYSc86sQAAABY"]
[Tue Sep 01 12:16:34.294728 2026] [:error] [pid 6089:tid 140353239717632] [client 20.104.49.130:9702] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/first.php"] [unique_id "apcIcpjeM2TaVrIYSc86sgAAABE"]
[Tue Sep 01 12:16:37.739447 2026] [:error] [pid 28500:tid 140353281681152] [client 20.104.49.130:9689] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bdroot.php"] [unique_id "apcIdTQYUm0S3Gh9Jn8OFgAAAYw"]
[Tue Sep 01 12:16:37.779563 2026] [:error] [pid 6089:tid 140353206146816] [client 20.104.49.130:26077] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mcebraed.php"] [unique_id "apcIdZjeM2TaVrIYSc86tQAAABU"]
[Tue Sep 01 12:16:38.904232 2026] [:error] [pid 28500:tid 140353256503040] [client 20.104.49.130:26066] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/retu11.PhP"] [unique_id "apcIdjQYUm0S3Gh9Jn8OGAAAAY8"]
[Tue Sep 01 12:16:40.277588 2026] [:error] [pid 6091:tid 140353197754112] [client 20.104.49.130:26159] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/w.php"] [unique_id "apcIeMkVYOXruxV21N4nmwAAAJY"]
[Tue Sep 01 12:16:44.643505 2026] [:error] [pid 6089:tid 140353298466560] [client 20.104.49.130:9700] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp5.php"] [unique_id "apcIfJjeM2TaVrIYSc86uAAAAAo"]
[Tue Sep 01 12:16:48.575781 2026] [:error] [pid 28500:tid 140353340430080] [client 20.104.49.130:26079] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/paypal.php"] [unique_id "apcIgDQYUm0S3Gh9Jn8OIAAAAYU"]
[Tue Sep 01 12:16:50.893407 2026] [:error] [pid 11529:tid 140353340430080] [client 20.104.49.130:26360] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/man.php"] [unique_id "apcIgi580fjDz1VV6yeP9wAAAcU"]
[Tue Sep 01 12:16:51.383598 2026] [:error] [pid 28194:tid 140353214539520] [client 20.104.49.130:26145] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/conf.php"] [unique_id "apcIgwdz-EN0cDNAEVJOPQAAAVQ"]
[Tue Sep 01 12:16:51.858242 2026] [:error] [pid 6091:tid 140353323644672] [client 20.104.49.130:26053] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/db.php"] [unique_id "apcIg8kVYOXruxV21N4nnAAAAIc"]
[Tue Sep 01 12:16:52.779750 2026] [:error] [pid 6091:tid 140353248110336] [client 20.104.49.130:26090] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ffile.php"] [unique_id "apcIhMkVYOXruxV21N4nnQAAAJA"]
[Tue Sep 01 12:16:53.800448 2026] [:error] [pid 28500:tid 140353443960576] [client 20.104.49.130:26142] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ff123.php"] [unique_id "apcIhTQYUm0S3Gh9Jn8OJgAAAYE"]
[Tue Sep 01 12:16:54.535975 2026] [:error] [pid 29615:tid 140353197754112] [client 20.104.49.130:9348] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hehe.php"] [unique_id "apcIhp1PBa8fnDJM-t7TqwAAAhY"]
[Tue Sep 01 12:16:54.543548 2026] [:error] [pid 29615:tid 140353256503040] [client 20.104.49.130:26068] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a.php"] [unique_id "apcIhp1PBa8fnDJM-t7TrAAAAg8"]
[Tue Sep 01 12:16:55.208998 2026] [:error] [pid 11529:tid 140353256503040] [client 20.104.49.130:26165] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/acces.php"] [unique_id "apcIhy580fjDz1VV6yeP-QAAAc8"]
[Tue Sep 01 12:16:56.010676 2026] [:error] [pid 6091:tid 140353256503040] [client 20.104.49.130:26168] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/Sanskrit.php"] [unique_id "apcIiMkVYOXruxV21N4nngAAAI8"]
[Tue Sep 01 12:16:56.640261 2026] [:error] [pid 28500:tid 140353214539520] [client 20.104.49.130:10123] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a1.php"] [unique_id "apcIiDQYUm0S3Gh9Jn8OKwAAAZQ"]
[Tue Sep 01 12:16:59.766924 2026] [:error] [pid 11529:tid 140353222932224] [client 20.104.49.130:26057] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/133.php"] [unique_id "apcIiy580fjDz1VV6yeQJgAAAdM"]
[Tue Sep 01 12:17:00.046076 2026] [:error] [pid 29615:tid 140353273288448] [client 20.104.49.130:26122] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/reune.php"] [unique_id "apcIjJ1PBa8fnDJM-t7TrQAAAg0"]
[Tue Sep 01 12:17:00.368586 2026] [:error] [pid 29615:tid 140353306859264] [client 20.104.49.130:26094] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pol.php"] [unique_id "apcIjJ1PBa8fnDJM-t7TrgAAAgk"]
[Tue Sep 01 12:17:00.749357 2026] [:error] [pid 29615:tid 140353435567872] [client 20.104.49.130:26101] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo2.php"] [unique_id "apcIjJ1PBa8fnDJM-t7TrwAAAgI"]
[Tue Sep 01 12:17:01.082526 2026] [:error] [pid 6411:tid 140353180968704] [client 20.104.49.130:26107] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/BDKR28WP.php"] [unique_id "apcIja-5XxGfLhlq8xnLhAAAANg"]
[Tue Sep 01 12:17:01.342532 2026] [:error] [pid 29615:tid 140353180968704] [client 20.104.49.130:26088] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jlex.php"] [unique_id "apcIjZ1PBa8fnDJM-t7TsAAAAhg"]
[Tue Sep 01 12:17:01.636963 2026] [:error] [pid 11529:tid 140353435567872] [client 20.104.49.130:26106] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/v.php"] [unique_id "apcIjS580fjDz1VV6yeQOwAAAcI"]
[Tue Sep 01 12:17:02.157815 2026] [:error] [pid 11529:tid 140353452353280] [client 20.104.49.130:26097] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dejavu.php"] [unique_id "apcIji580fjDz1VV6yeQQgAAAcA"]
[Tue Sep 01 12:17:02.492557 2026] [:error] [pid 9194:tid 140353273288448] [client 20.104.49.130:26367] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ey5.php"] [unique_id "apcIjodqWCmIAB5WEG-FFAAAAQ0"]
[Tue Sep 01 12:17:03.195189 2026] [:error] [pid 6411:tid 140353306859264] [client 20.104.49.130:26082] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/app.php"] [unique_id "apcIj6-5XxGfLhlq8xnLhQAAAMk"]
[Tue Sep 01 12:17:03.897000 2026] [:error] [pid 6411:tid 140353298466560] [client 20.104.49.130:26363] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/shell.php"] [unique_id "apcIj6-5XxGfLhlq8xnLhgAAAMo"]
[Tue Sep 01 12:17:04.822742 2026] [:error] [pid 6089:tid 140353256503040] [client 20.104.49.130:9318] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file17.php"] [unique_id "apcIkJjeM2TaVrIYSc86wAAAAA8"]
[Tue Sep 01 12:17:06.674472 2026] [:error] [pid 6411:tid 140353281681152] [client 20.104.49.130:9287] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php_load.php"] [unique_id "apcIkq-5XxGfLhlq8xnLhwAAAMw"]
[Tue Sep 01 12:17:07.443862 2026] [:error] [pid 6089:tid 140353214539520] [client 20.104.49.130:26083] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aa.php"] [unique_id "apcIk5jeM2TaVrIYSc86zQAAABQ"]
[Tue Sep 01 12:17:08.857769 2026] [:error] [pid 6089:tid 140353256503040] [client 20.104.49.130:26096] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/diidi.php"] [unique_id "apcIlJjeM2TaVrIYSc861AAAAA8"]
[Tue Sep 01 12:17:08.963152 2026] [:error] [pid 28194:tid 140353290073856] [client 20.104.49.130:9379] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dox.php"] [unique_id "apcIlAdz-EN0cDNAEVJORAAAAUs"]
[Tue Sep 01 12:17:09.819015 2026] [:error] [pid 11529:tid 140353290073856] [client 20.104.49.130:9706] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/docs.php"] [unique_id "apcIlS580fjDz1VV6yeQagAAAcs"]
[Tue Sep 01 12:17:10.328660 2026] [:error] [pid 6089:tid 140353332037376] [client 20.104.49.130:26338] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php.php"] [unique_id "apcIlpjeM2TaVrIYSc861gAAAAY"]
[Tue Sep 01 12:17:10.374795 2026] [:error] [pid 6411:tid 140353248110336] [client 20.104.49.130:9682] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/privdayz.php"] [unique_id "apcIlq-5XxGfLhlq8xnLigAAANA"]
[Tue Sep 01 12:17:11.067311 2026] [:error] [pid 6089:tid 140353180968704] [client 20.104.49.130:9408] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/category.php"] [unique_id "apcIl5jeM2TaVrIYSc861wAAABg"]
[Tue Sep 01 12:17:11.421028 2026] [:error] [pid 6089:tid 140353348822784] [client 20.104.49.130:26125] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/browse.php"] [unique_id "apcIl5jeM2TaVrIYSc862AAAAAQ"]
[Tue Sep 01 12:17:11.698689 2026] [:error] [pid 28500:tid 140353435567872] [client 20.104.49.130:9721] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/av.php"] [unique_id "apcIlzQYUm0S3Gh9Jn8ONgAAAYI"]
[Tue Sep 01 12:17:12.032529 2026] [:error] [pid 6090:tid 140353298466560] [client 20.104.49.130:26115] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pepe.php"] [unique_id "apcImLPf1VxWhFqgvWsSTQAAAEo"]
[Tue Sep 01 12:17:12.542040 2026] [:error] [pid 11529:tid 140353298466560] [client 20.104.49.130:26111] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/babu.php"] [unique_id "apcImC580fjDz1VV6yeQawAAAco"]
[Tue Sep 01 12:17:12.945675 2026] [:error] [pid 6411:tid 140353222932224] [client 20.104.49.130:26172] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/b.php"] [unique_id "apcImK-5XxGfLhlq8xnLiwAAANM"]
[Tue Sep 01 12:17:13.214142 2026] [:error] [pid 6411:tid 140353273288448] [client 20.104.49.130:26108] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/d2.php"] [unique_id "apcIma-5XxGfLhlq8xnLjAAAAM0"]
[Tue Sep 01 12:17:13.463046 2026] [:error] [pid 11529:tid 140353180968704] [client 20.104.49.130:9390] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/small.php"] [unique_id "apcImS580fjDz1VV6yeQbQAAAdg"]
[Tue Sep 01 12:17:13.773938 2026] [:error] [pid 11529:tid 140353206146816] [client 20.104.49.130:26173] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/makeasmtp.php"] [unique_id "apcImS580fjDz1VV6yeQbgAAAdU"]
[Tue Sep 01 12:17:14.084675 2026] [:error] [pid 6411:tid 140353231324928] [client 20.104.49.130:9665] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/about/goods.php"] [unique_id "apcImq-5XxGfLhlq8xnLjQAAANI"]
[Tue Sep 01 12:17:14.388053 2026] [:error] [pid 11529:tid 140353443960576] [client 20.104.49.130:26151] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/d12.php"] [unique_id "apcImi580fjDz1VV6yeQbwAAAcE"]
[Tue Sep 01 12:17:14.616971 2026] [:error] [pid 6090:tid 140353206146816] [client 20.104.49.130:10124] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/congeree.php"] [unique_id "apcImrPf1VxWhFqgvWsSTgAAAFU"]
[Tue Sep 01 12:17:14.977395 2026] [:error] [pid 6089:tid 140353214539520] [client 20.104.49.130:9717] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/666666.php"] [unique_id "apcImpjeM2TaVrIYSc862gAAABQ"]
[Tue Sep 01 12:17:15.067709 2026] [:error] [pid 29615:tid 140353298466560] [client 20.104.49.130:26314] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/palsy.php"] [unique_id "apcIm51PBa8fnDJM-t7TsQAAAgo"]
[Tue Sep 01 12:17:15.398577 2026] [:error] [pid 6090:tid 140353323644672] [client 20.104.49.130:9308] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/navbar.php"] [unique_id "apcIm7Pf1VxWhFqgvWsSTwAAAEc"]
[Tue Sep 01 12:17:15.688491 2026] [:error] [pid 11529:tid 140353248110336] [client 20.104.49.130:26313] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/Njima.php"] [unique_id "apcImy580fjDz1VV6yeQcAAAAdA"]
[Tue Sep 01 12:17:15.721001 2026] [:error] [pid 11529:tid 140353315251968] [client 20.104.49.130:10147] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lala.php"] [unique_id "apcImy580fjDz1VV6yeQcQAAAcg"]
[Tue Sep 01 12:17:16.129169 2026] [:error] [pid 6089:tid 140353239717632] [client 20.104.49.130:9415] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/css.php"] [unique_id "apcInJjeM2TaVrIYSc862wAAABE"]
[Tue Sep 01 12:17:16.561638 2026] [:error] [pid 11529:tid 140353435567872] [client 20.104.49.130:26091] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ms-users.php"] [unique_id "apcInC580fjDz1VV6yeQcgAAAcI"]
[Tue Sep 01 12:17:16.828324 2026] [:error] [pid 9194:tid 140353348822784] [client 20.104.49.130:26123] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/7.php"] [unique_id "apcInIdqWCmIAB5WEG-FFwAAAQQ"]
[Tue Sep 01 12:17:17.095112 2026] [:error] [pid 6089:tid 140353281681152] [client 20.104.49.130:9679] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/plss3.php"] [unique_id "apcInZjeM2TaVrIYSc863AAAAAw"]
[Tue Sep 01 12:17:17.215038 2026] [:error] [pid 6091:tid 140353443960576] [client 20.104.49.130:26305] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file25.php"] [unique_id "apcInckVYOXruxV21N4noQAAAIE"]
[Tue Sep 01 12:17:17.601690 2026] [:error] [pid 6090:tid 140353222932224] [client 20.104.49.130:9329] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phina.php"] [unique_id "apcInbPf1VxWhFqgvWsSUAAAAFM"]
[Tue Sep 01 12:17:17.719416 2026] [:error] [pid 29615:tid 140353248110336] [client 20.104.49.130:25757] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/geju.php"] [unique_id "apcInZ1PBa8fnDJM-t7TsgAAAhA"]
[Tue Sep 01 12:17:17.962230 2026] [:error] [pid 28500:tid 140353281681152] [client 20.104.49.130:9438] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/87.php"] [unique_id "apcInTQYUm0S3Gh9Jn8OOAAAAYw"]
[Tue Sep 01 12:17:18.096679 2026] [:error] [pid 28500:tid 140353357215488] [client 20.104.49.130:26318] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mailchimp.php"] [unique_id "apcInjQYUm0S3Gh9Jn8OOQAAAYM"]
[Tue Sep 01 12:17:18.246825 2026] [:error] [pid 28194:tid 140353357215488] [client 20.104.49.130:9687] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hosty.php"] [unique_id "apcIngdz-EN0cDNAEVJORwAAAUM"]
[Tue Sep 01 12:17:19.141857 2026] [:error] [pid 11529:tid 140353281681152] [client 20.104.49.130:9678] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo01.php"] [unique_id "apcIny580fjDz1VV6yeQcwAAAcw"]
[Tue Sep 01 12:17:19.757238 2026] [:error] [pid 6089:tid 140353197754112] [client 20.104.49.130:9383] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kedi.php"] [unique_id "apcIn5jeM2TaVrIYSc863wAAABY"]
[Tue Sep 01 12:17:19.923325 2026] [:error] [pid 28194:tid 140353248110336] [client 20.104.49.130:26331] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bnm.php"] [unique_id "apcInwdz-EN0cDNAEVJOSAAAAVA"]
[Tue Sep 01 12:17:20.872756 2026] [:error] [pid 6089:tid 140353206146816] [client 20.104.49.130:26126] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/indo.php"] [unique_id "apcIoJjeM2TaVrIYSc864AAAABU"]
[Tue Sep 01 12:17:21.083706 2026] [:error] [pid 11529:tid 140353323644672] [client 20.104.49.130:10125] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apcIoS580fjDz1VV6yeQdAAAAcc"]
[Tue Sep 01 12:17:21.624329 2026] [:error] [pid 6089:tid 140353222932224] [client 20.104.49.130:26078] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/faq.php"] [unique_id "apcIoZjeM2TaVrIYSc864QAAABM"]
[Tue Sep 01 12:17:23.316803 2026] [:error] [pid 6091:tid 140353273288448] [client 20.104.49.130:9715] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/doc.php"] [unique_id "apcIo8kVYOXruxV21N4nowAAAI0"]
[Tue Sep 01 12:17:23.372177 2026] [:error] [pid 6091:tid 140353332037376] [client 20.104.49.130:26335] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gecko-new.php"] [unique_id "apcIo8kVYOXruxV21N4npAAAAIY"]
[Tue Sep 01 12:17:25.699682 2026] [:error] [pid 29615:tid 140353239717632] [client 20.104.49.130:9720] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file21.php"] [unique_id "apcIpZ1PBa8fnDJM-t7TswAAAhE"]
[Tue Sep 01 12:17:26.046382 2026] [:error] [pid 29615:tid 140353189361408] [client 20.104.49.130:26138] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/1.php"] [unique_id "apcIpp1PBa8fnDJM-t7TtAAAAhc"]
[Tue Sep 01 12:17:27.433570 2026] [:error] [pid 28500:tid 140353180968704] [client 20.104.49.130:9676] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/register.php"] [unique_id "apcIpzQYUm0S3Gh9Jn8OOwAAAZg"]
[Tue Sep 01 12:17:29.996588 2026] [:error] [pid 29615:tid 140353357215488] [client 20.104.49.130:26323] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lx.php"] [unique_id "apcIqZ1PBa8fnDJM-t7TtQAAAgM"]
[Tue Sep 01 12:17:31.432217 2026] [:error] [pid 6090:tid 140353256503040] [client 20.104.49.130:9307] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/atex1.php"] [unique_id "apcIq7Pf1VxWhFqgvWsSVwAAAE8"]
[Tue Sep 01 12:17:31.742961 2026] [:error] [pid 6090:tid 140353332037376] [client 20.104.49.130:25751] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/payment.php"] [unique_id "apcIq7Pf1VxWhFqgvWsSWAAAAEY"]
[Tue Sep 01 12:17:32.135751 2026] [:error] [pid 6090:tid 140353306859264] [client 20.104.49.130:26353] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hanna1337.php"] [unique_id "apcIrLPf1VxWhFqgvWsSWQAAAEk"]
[Tue Sep 01 12:17:32.193093 2026] [:error] [pid 6090:tid 140353298466560] [client 20.104.49.130:10156] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/oc460l3x.php"] [unique_id "apcIrLPf1VxWhFqgvWsSWgAAAEo"]
[Tue Sep 01 12:17:32.616753 2026] [:error] [pid 11529:tid 140353290073856] [client 20.104.49.130:9323] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lm15.php"] [unique_id "apcIrC580fjDz1VV6yeQdgAAAcs"]
[Tue Sep 01 12:17:32.895025 2026] [:error] [pid 28194:tid 140353298466560] [client 20.104.49.130:25749] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cu.php"] [unique_id "apcIrAdz-EN0cDNAEVJOSgAAAUo"]
[Tue Sep 01 12:17:33.155493 2026] [:error] [pid 6090:tid 140353281681152] [client 20.104.49.130:10128] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/drykl.php"] [unique_id "apcIrbPf1VxWhFqgvWsSWwAAAEw"]
[Tue Sep 01 12:17:33.415691 2026] [:error] [pid 6090:tid 140353222932224] [client 20.104.49.130:26118] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gk.php"] [unique_id "apcIrbPf1VxWhFqgvWsSXAAAAFM"]
[Tue Sep 01 12:17:33.499820 2026] [:error] [pid 9194:tid 140353306859264] [client 20.104.49.130:9396] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fns.php"] [unique_id "apcIrYdqWCmIAB5WEG-FGgAAAQk"]
[Tue Sep 01 12:17:33.827086 2026] [:error] [pid 6411:tid 140353239717632] [client 20.104.49.130:26309] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/site2.php"] [unique_id "apcIra-5XxGfLhlq8xnLkQAAANE"]
[Tue Sep 01 12:17:34.130613 2026] [:error] [pid 6090:tid 140353315251968] [client 20.104.49.130:10160] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/333.php"] [unique_id "apcIrrPf1VxWhFqgvWsSXgAAAEg"]
[Tue Sep 01 12:17:34.130970 2026] [:error] [pid 28500:tid 140353273288448] [client 20.104.49.130:26087] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ecvvhlei.php"] [unique_id "apcIrjQYUm0S3Gh9Jn8OPAAAAY0"]
[Tue Sep 01 12:17:34.431073 2026] [:error] [pid 6089:tid 140353315251968] [client 20.104.49.130:10171] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpi.php"] [unique_id "apcIrpjeM2TaVrIYSc865QAAAAg"]
[Tue Sep 01 12:17:34.605030 2026] [:error] [pid 9194:tid 140353264895744] [client 20.104.49.130:26364] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/reop3.php"] [unique_id "apcIrodqWCmIAB5WEG-FGwAAAQ4"]
[Tue Sep 01 12:17:34.719135 2026] [:error] [pid 9194:tid 140353315251968] [client 20.104.49.130:9309] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/25.php"] [unique_id "apcIrodqWCmIAB5WEG-FHQAAAQg"]
[Tue Sep 01 12:17:35.279283 2026] [:error] [pid 9194:tid 140353340430080] [client 20.104.49.130:10164] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bengi.php"] [unique_id "apcIr4dqWCmIAB5WEG-FHgAAAQU"]
[Tue Sep 01 12:17:35.296460 2026] [:error] [pid 6091:tid 140353256503040] [client 20.104.49.130:25731] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/special.php"] [unique_id "apcIr8kVYOXruxV21N4npwAAAI8"]
[Tue Sep 01 12:17:35.807175 2026] [:error] [pid 11529:tid 140353206146816] [client 20.104.49.130:10136] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/server-info.php"] [unique_id "apcIry580fjDz1VV6yeQeAAAAdU"]
[Tue Sep 01 12:17:36.061525 2026] [:error] [pid 11529:tid 140353239717632] [client 20.104.49.130:26340] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/arig.php"] [unique_id "apcIsC580fjDz1VV6yeQewAAAdE"]
[Tue Sep 01 12:17:36.125865 2026] [:error] [pid 9194:tid 140353256503040] [client 20.104.49.130:9462] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nlnub.php"] [unique_id "apcIsIdqWCmIAB5WEG-FHwAAAQ8"]
[Tue Sep 01 12:17:36.696819 2026] [:error] [pid 6089:tid 140353435567872] [client 20.104.49.130:26089] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phprelease.php"] [unique_id "apcIsJjeM2TaVrIYSc865gAAAAI"]
[Tue Sep 01 12:17:36.921352 2026] [:error] [pid 28500:tid 140353323644672] [client 20.104.49.130:9697] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/124.php"] [unique_id "apcIsDQYUm0S3Gh9Jn8OPQAAAYc"]
[Tue Sep 01 12:17:36.995495 2026] [:error] [pid 6091:tid 140353206146816] [client 20.104.49.130:26312] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/SDsadqwrf.php"] [unique_id "apcIsMkVYOXruxV21N4nqAAAAJU"]
[Tue Sep 01 12:17:37.274832 2026] [:error] [pid 29615:tid 140353197754112] [client 20.104.49.130:9425] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gnmlc.php"] [unique_id "apcIsZ1PBa8fnDJM-t7TtwAAAhY"]
[Tue Sep 01 12:17:37.632942 2026] [:error] [pid 6091:tid 140353264895744] [client 20.104.49.130:9463] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/png.php"] [unique_id "apcIsckVYOXruxV21N4nqQAAAI4"]
[Tue Sep 01 12:17:39.489041 2026] [:error] [pid 9194:tid 140353189361408] [client 20.104.49.130:9417] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/error_log.php"] [unique_id "apcIs4dqWCmIAB5WEG-FIQAAARc"]
[Tue Sep 01 12:17:40.734750 2026] [:error] [pid 11529:tid 140353435567872] [client 20.104.49.130:10173] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/saml.php"] [unique_id "apcItC580fjDz1VV6yeQfgAAAcI"]
[Tue Sep 01 12:17:41.415048 2026] [:error] [pid 6091:tid 140353332037376] [client 20.104.49.130:10113] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cp2.php"] [unique_id "apcItckVYOXruxV21N4nrAAAAIY"]
[Tue Sep 01 12:17:42.719962 2026] [:error] [pid 9194:tid 140353435567872] [client 20.104.49.130:26345] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/acp.php"] [unique_id "apcItodqWCmIAB5WEG-FIwAAAQI"]
[Tue Sep 01 12:17:43.056131 2026] [:error] [pid 6090:tid 140353264895744] [client 20.104.49.130:9405] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ms-edit.php"] [unique_id "apcIt7Pf1VxWhFqgvWsSXwAAAE4"]
[Tue Sep 01 12:17:43.730171 2026] [:error] [pid 29615:tid 140353323644672] [client 20.104.49.130:26136] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aafewc0k.php"] [unique_id "apcIt51PBa8fnDJM-t7TuQAAAgc"]
[Tue Sep 01 12:17:44.299353 2026] [:error] [pid 6089:tid 140353281681152] [client 20.104.49.130:26326] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/berlin.php"] [unique_id "apcIuJjeM2TaVrIYSc865wAAAAw"]
[Tue Sep 01 12:17:44.742428 2026] [:error] [pid 11529:tid 140353231324928] [client 20.104.49.130:9290] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/test1.php"] [unique_id "apcIuC580fjDz1VV6yeQgQAAAdI"]
[Tue Sep 01 12:17:44.744536 2026] [:error] [pid 6090:tid 140353443960576] [client 20.104.49.130:26063] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/9.php"] [unique_id "apcIuLPf1VxWhFqgvWsSZgAAAEE"]
[Tue Sep 01 12:17:45.049593 2026] [:error] [pid 6411:tid 140353281681152] [client 20.104.49.130:26103] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/3.php"] [unique_id "apcIua-5XxGfLhlq8xnLkgAAAMw"]
[Tue Sep 01 12:17:46.395114 2026] [:error] [pid 11529:tid 140353180968704] [client 20.104.49.130:10116] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fraro.php"] [unique_id "apcIui580fjDz1VV6yeQgwAAAdg"]
[Tue Sep 01 12:17:49.258287 2026] [:error] [pid 6089:tid 140353256503040] [client 20.104.49.130:9388] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/otuz1.php"] [unique_id "apcIvZjeM2TaVrIYSc866AAAAA8"]
[Tue Sep 01 12:17:50.098992 2026] [:error] [pid 28500:tid 140353273288448] [client 20.104.49.130:10175] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/4563.php"] [unique_id "apcIvjQYUm0S3Gh9Jn8ObAAAAY0"]
[Tue Sep 01 12:17:51.897506 2026] [:error] [pid 11529:tid 140353452353280] [client 20.104.49.130:9294] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminfus.php"] [unique_id "apcIvy580fjDz1VV6yeQhAAAAcA"]
[Tue Sep 01 12:17:53.058753 2026] [:error] [pid 11529:tid 140353189361408] [client 20.104.49.130:9340] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sale.php"] [unique_id "apcIwS580fjDz1VV6yeQhgAAAdc"]
[Tue Sep 01 12:17:53.570191 2026] [:error] [pid 29615:tid 140353214539520] [client 20.104.49.130:10115] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mcebraed.php"] [unique_id "apcIwZ1PBa8fnDJM-t7TvgAAAhQ"]
[Tue Sep 01 12:17:53.935371 2026] [:error] [pid 6089:tid 140353206146816] [client 20.104.49.130:9386] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/retu11.PhP"] [unique_id "apcIwZjeM2TaVrIYSc866QAAABU"]
[Tue Sep 01 12:17:54.261658 2026] [:error] [pid 28500:tid 140353180968704] [client 20.104.49.130:10163] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/w.php"] [unique_id "apcIwjQYUm0S3Gh9Jn8OgAAAAZg"]
[Tue Sep 01 12:17:54.637488 2026] [:error] [pid 6090:tid 140353273288448] [client 20.104.49.130:9688] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/paypal.php"] [unique_id "apcIwrPf1VxWhFqgvWsSgwAAAE0"]
[Tue Sep 01 12:17:54.913481 2026] [:error] [pid 28194:tid 140353306859264] [client 20.104.49.130:9416] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/man.php"] [unique_id "apcIwgdz-EN0cDNAEVJOTQAAAUk"]
[Tue Sep 01 12:17:55.494743 2026] [:error] [pid 6089:tid 140353264895744] [client 20.104.49.130:10141] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/conf.php"] [unique_id "apcIw5jeM2TaVrIYSc866wAAAA4"]
[Tue Sep 01 12:17:55.907294 2026] [:error] [pid 6089:tid 140353298466560] [client 20.104.49.130:9450] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/db.php"] [unique_id "apcIw5jeM2TaVrIYSc867AAAAAo"]
[Tue Sep 01 12:17:56.519656 2026] [:error] [pid 11529:tid 140353281681152] [client 20.104.49.130:9707] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ffile.php"] [unique_id "apcIxC580fjDz1VV6yeQiAAAAcw"]
[Tue Sep 01 12:17:57.169244 2026] [:error] [pid 28500:tid 140353206146816] [client 20.104.49.130:9683] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ff123.php"] [unique_id "apcIxTQYUm0S3Gh9Jn8OhAAAAZU"]
[Tue Sep 01 12:17:57.465041 2026] [:error] [pid 28194:tid 140353315251968] [client 20.104.49.130:10144] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a.php"] [unique_id "apcIxQdz-EN0cDNAEVJOTgAAAUg"]
[Tue Sep 01 12:17:57.930535 2026] [:error] [pid 11529:tid 140353231324928] [client 20.104.49.130:9430] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/acces.php"] [unique_id "apcIxS580fjDz1VV6yeQigAAAdI"]
[Tue Sep 01 12:17:58.322398 2026] [:error] [pid 28194:tid 140353231324928] [client 20.104.49.130:10167] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/Sanskrit.php"] [unique_id "apcIxgdz-EN0cDNAEVJOUAAAAVI"]
[Tue Sep 01 12:17:58.581449 2026] [:error] [pid 28194:tid 140353206146816] [client 20.104.49.130:9710] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/133.php"] [unique_id "apcIxgdz-EN0cDNAEVJOUQAAAVU"]
[Tue Sep 01 12:17:58.989159 2026] [:error] [pid 6411:tid 140353443960576] [client 20.104.49.130:9404] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/reune.php"] [unique_id "apcIxq-5XxGfLhlq8xnLlAAAAME"]
[Tue Sep 01 12:17:59.366074 2026] [:error] [pid 11529:tid 140353197754112] [client 20.104.49.130:9667] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pol.php"] [unique_id "apcIxy580fjDz1VV6yeQjQAAAdY"]
[Tue Sep 01 12:17:59.632619 2026] [:error] [pid 6411:tid 140353248110336] [client 20.104.49.130:9705] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo2.php"] [unique_id "apcIx6-5XxGfLhlq8xnLlQAAANA"]
[Tue Sep 01 12:18:00.194838 2026] [:error] [pid 11529:tid 140353298466560] [client 20.104.49.130:9455] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/BDKR28WP.php"] [unique_id "apcIyC580fjDz1VV6yeQjwAAAco"]
[Tue Sep 01 12:18:00.519617 2026] [:error] [pid 11529:tid 140353332037376] [client 20.104.49.130:9423] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jlex.php"] [unique_id "apcIyC580fjDz1VV6yeQkAAAAcY"]
[Tue Sep 01 12:18:01.148244 2026] [:error] [pid 9194:tid 140353306859264] [client 20.104.49.130:10119] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/v.php"] [unique_id "apcIyYdqWCmIAB5WEG-FJAAAAQk"]
[Tue Sep 01 12:18:01.697711 2026] [:error] [pid 6089:tid 140353435567872] [client 20.104.49.130:9713] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dejavu.php"] [unique_id "apcIyZjeM2TaVrIYSc868AAAAAI"]
[Tue Sep 01 12:18:02.258451 2026] [:error] [pid 6089:tid 140353340430080] [client 20.104.49.130:9246] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ey5.php"] [unique_id "apcIypjeM2TaVrIYSc868QAAAAU"]
[Tue Sep 01 12:18:02.589949 2026] [:error] [pid 11529:tid 140353214539520] [client 20.104.49.130:9299] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/app.php"] [unique_id "apcIyi580fjDz1VV6yeQkQAAAdQ"]
[Tue Sep 01 12:18:02.969658 2026] [:error] [pid 11529:tid 140353340430080] [client 20.104.49.130:9429] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/shell.php"] [unique_id "apcIyi580fjDz1VV6yeQkgAAAcU"]
[Tue Sep 01 12:18:03.327701 2026] [:error] [pid 11529:tid 140353315251968] [client 20.104.49.130:10134] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aa.php"] [unique_id "apcIyy580fjDz1VV6yeQkwAAAcg"]
[Tue Sep 01 12:18:03.643990 2026] [:error] [pid 11529:tid 140353435567872] [client 20.104.49.130:9432] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/diidi.php"] [unique_id "apcIyy580fjDz1VV6yeQlAAAAcI"]
[Tue Sep 01 12:18:04.354217 2026] [:error] [pid 11529:tid 140353281681152] [client 20.104.49.130:9410] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php.php"] [unique_id "apcIzC580fjDz1VV6yeQlQAAAcw"]
[Tue Sep 01 12:18:04.734652 2026] [:error] [pid 6089:tid 140353273288448] [client 20.104.49.130:9677] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/browse.php"] [unique_id "apcIzJjeM2TaVrIYSc868wAAAA0"]
[Tue Sep 01 12:18:05.218000 2026] [:error] [pid 11529:tid 140353290073856] [client 20.104.49.130:9413] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pepe.php"] [unique_id "apcIzS580fjDz1VV6yeQlwAAAcs"]
[Tue Sep 01 12:18:05.594049 2026] [:error] [pid 11529:tid 140353273288448] [client 20.104.49.130:9446] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/babu.php"] [unique_id "apcIzS580fjDz1VV6yeQmAAAAc0"]
[Tue Sep 01 12:18:06.373959 2026] [:error] [pid 6411:tid 140353231324928] [client 20.104.49.130:9703] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/b.php"] [unique_id "apcIzq-5XxGfLhlq8xnLmAAAANI"]
[Tue Sep 01 12:18:08.578462 2026] [:error] [pid 6089:tid 140353256503040] [client 20.104.49.130:9229] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/d2.php"] [unique_id "apcI0JjeM2TaVrIYSc87BAAAAA8"]
[Tue Sep 01 12:18:09.895855 2026] [:error] [pid 6089:tid 140353323644672] [client 20.104.49.130:10130] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/makeasmtp.php"] [unique_id "apcI0ZjeM2TaVrIYSc87EQAAAAc"]
[Tue Sep 01 12:18:10.278331 2026] [:error] [pid 6089:tid 140353248110336] [client 20.104.49.130:10154] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/d12.php"] [unique_id "apcI0pjeM2TaVrIYSc87FgAAABA"]
[Tue Sep 01 12:18:11.132878 2026] [:error] [pid 6411:tid 140353264895744] [client 20.104.49.130:9436] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/palsy.php"] [unique_id "apcI06-5XxGfLhlq8xnLmwAAAM4"]
[Tue Sep 01 12:18:11.872171 2026] [:error] [pid 9194:tid 140353315251968] [client 20.104.49.130:9426] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/Njima.php"] [unique_id "apcI04dqWCmIAB5WEG-FJQAAAQg"]
[Tue Sep 01 12:18:12.396019 2026] [:error] [pid 11529:tid 140353323644672] [client 20.104.49.130:9454] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ms-users.php"] [unique_id "apcI1C580fjDz1VV6yeQmwAAAcc"]
[Tue Sep 01 12:18:13.632146 2026] [:error] [pid 28500:tid 140353231324928] [client 20.104.49.130:10137] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/7.php"] [unique_id "apcI1TQYUm0S3Gh9Jn8OiAAAAZI"]
[Tue Sep 01 12:18:14.188105 2026] [:error] [pid 6089:tid 140353323644672] [client 20.104.49.130:9369] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file25.php"] [unique_id "apcI1pjeM2TaVrIYSc87PgAAAAc"]
[Tue Sep 01 12:18:14.690682 2026] [:error] [pid 28500:tid 140353264895744] [client 20.104.49.130:9666] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/geju.php"] [unique_id "apcI1jQYUm0S3Gh9Jn8OiwAAAY4"]
[Tue Sep 01 12:18:15.032398 2026] [:error] [pid 28500:tid 140353340430080] [client 20.104.49.130:10150] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mailchimp.php"] [unique_id "apcI1zQYUm0S3Gh9Jn8OjAAAAYU"]
[Tue Sep 01 12:18:15.512771 2026] [:error] [pid 6091:tid 140353443960576] [client 20.104.49.130:10118] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bnm.php"] [unique_id "apcI18kVYOXruxV21N4oAAAAAIE"]
[Tue Sep 01 12:18:16.495360 2026] [:error] [pid 11529:tid 140353306859264] [client 20.104.49.130:9281] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/indo.php"] [unique_id "apcI2C580fjDz1VV6yeQpQAAAck"]
[Tue Sep 01 12:18:17.270785 2026] [:error] [pid 11529:tid 140353298466560] [client 20.104.49.130:10169] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/faq.php"] [unique_id "apcI2S580fjDz1VV6yeQqQAAAco"]
[Tue Sep 01 12:18:17.759290 2026] [:error] [pid 28500:tid 140353239717632] [client 20.104.49.130:10122] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gecko-new.php"] [unique_id "apcI2TQYUm0S3Gh9Jn8OjgAAAZE"]
[Tue Sep 01 12:18:18.207191 2026] [:error] [pid 6411:tid 140353315251968] [client 20.104.49.130:9443] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/1.php"] [unique_id "apcI2q-5XxGfLhlq8xnLnAAAAMg"]
[Tue Sep 01 12:18:18.638194 2026] [:error] [pid 6411:tid 140353435567872] [client 20.104.49.130:9304] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lx.php"] [unique_id "apcI2q-5XxGfLhlq8xnLnQAAAMI"]
[Tue Sep 01 12:18:19.070379 2026] [:error] [pid 9194:tid 140353281681152] [client 20.104.49.130:10140] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/payment.php"] [unique_id "apcI24dqWCmIAB5WEG-FKAAAAQw"]
[Tue Sep 01 12:18:19.348543 2026] [:error] [pid 9194:tid 140353273288448] [client 20.104.49.130:10133] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hanna1337.php"] [unique_id "apcI24dqWCmIAB5WEG-FKQAAAQ0"]
[Tue Sep 01 12:18:19.773755 2026] [:error] [pid 28500:tid 140353348822784] [client 20.104.49.130:9366] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cu.php"] [unique_id "apcI2zQYUm0S3Gh9Jn8OjwAAAYQ"]
[Tue Sep 01 12:18:20.256747 2026] [:error] [pid 28500:tid 140353281681152] [client 20.104.49.130:9461] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gk.php"] [unique_id "apcI3DQYUm0S3Gh9Jn8OkAAAAYw"]
[Tue Sep 01 12:18:20.634004 2026] [:error] [pid 6090:tid 140353256503040] [client 20.104.49.130:9716] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/site2.php"] [unique_id "apcI3LPf1VxWhFqgvWsSjgAAAE8"]
[Tue Sep 01 12:18:21.074982 2026] [:error] [pid 28500:tid 140353256503040] [client 20.104.49.130:9325] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ecvvhlei.php"] [unique_id "apcI3TQYUm0S3Gh9Jn8OkQAAAY8"]
[Tue Sep 01 12:18:21.422499 2026] [:error] [pid 6089:tid 140353248110336] [client 20.104.49.130:9313] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/reop3.php"] [unique_id "apcI3ZjeM2TaVrIYSc87VwAAABA"]
[Tue Sep 01 12:18:21.922544 2026] [:error] [pid 28194:tid 140353222932224] [client 20.104.49.130:10138] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/special.php"] [unique_id "apcI3Qdz-EN0cDNAEVJOVQAAAVM"]
[Tue Sep 01 12:18:22.409819 2026] [:error] [pid 28194:tid 140353340430080] [client 20.104.49.130:9296] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/arig.php"] [unique_id "apcI3gdz-EN0cDNAEVJOVgAAAUU"]
[Tue Sep 01 12:18:22.720483 2026] [:error] [pid 11529:tid 140353357215488] [client 20.104.49.130:9305] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phprelease.php"] [unique_id "apcI3i580fjDz1VV6yeQrAAAAcM"]
[Tue Sep 01 12:18:23.296190 2026] [:error] [pid 11529:tid 140353298466560] [client 20.104.49.130:9312] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/SDsadqwrf.php"] [unique_id "apcI3y580fjDz1VV6yeQrQAAAco"]
[Tue Sep 01 12:18:24.036847 2026] [:error] [pid 11529:tid 140353231324928] [client 20.104.49.130:9360] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/acp.php"] [unique_id "apcI4C580fjDz1VV6yeQrwAAAdI"]
[Tue Sep 01 12:18:24.406213 2026] [:error] [pid 9194:tid 140353189361408] [client 20.104.49.130:10138] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aafewc0k.php"] [unique_id "apcI4IdqWCmIAB5WEG-FLAAAARc"]
[Tue Sep 01 12:18:24.742951 2026] [:error] [pid 29615:tid 140353256503040] [client 20.104.49.130:9418] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/berlin.php"] [unique_id "apcI4J1PBa8fnDJM-t7TwwAAAg8"]
[Tue Sep 01 12:18:25.180693 2026] [:error] [pid 6089:tid 140353357215488] [client 20.104.49.130:9326] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/9.php"] [unique_id "apcI4ZjeM2TaVrIYSc87WwAAAAM"]
[Tue Sep 01 12:18:25.485016 2026] [:error] [pid 28194:tid 140353197754112] [client 20.104.49.130:9469] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/3.php"] [unique_id "apcI4Qdz-EN0cDNAEVJOWAAAAVY"]
[Tue Sep 01 12:20:23.718042 2026] [:error] [pid 6411:tid 140353189361408] [client 175.178.110.121:44256] [client 175.178.110.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apcJV6-5XxGfLhlq8xnLywAAANc"]
[Tue Sep 01 13:17:50.083456 2026] [proxy_fcgi:error] [pid 6091:tid 140353306859264] [client 161.97.124.90:33902] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:34:31.342563 2026] [proxy_fcgi:error] [pid 28500:tid 140353357215488] [client 104.131.9.147:42758] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 14:17:15.233365 2026] [:error] [pid 6090:tid 140353323644672] [client 91.92.241.196:25158] [client 91.92.241.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/HEAD"] [unique_id "apcku7Pf1VxWhFqgvWsm7gAAAEc"]
[Tue Sep 01 14:17:15.731299 2026] [:error] [pid 28500:tid 140353298466560] [client 91.92.241.196:25190] [client 91.92.241.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "apckuzQYUm0S3Gh9Jn8qBAAAAYo"]
[Tue Sep 01 14:17:16.040595 2026] [:error] [pid 6411:tid 140353290073856] [client 91.92.241.196:17214] [client 91.92.241.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/HEAD"] [unique_id "apckvK-5XxGfLhlq8xn1GAAAAMs"]
[Tue Sep 01 14:17:16.349991 2026] [:error] [pid 6091:tid 140353306859264] [client 91.92.241.196:17228] [client 91.92.241.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "apckvMkVYOXruxV21N44QgAAAIk"]
[Tue Sep 01 14:38:57.689137 2026] [:error] [pid 6411:tid 140353206146816] [client 52.139.44.162:47605] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apcp0a-5XxGfLhlq8xn-5QAAANU"]
[Tue Sep 01 14:38:57.895742 2026] [:error] [pid 6411:tid 140353348822784] [client 52.139.44.162:53516] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apcp0a-5XxGfLhlq8xn-5gAAAMQ"]
[Tue Sep 01 14:38:58.109787 2026] [:error] [pid 6411:tid 140353435567872] [client 52.139.44.162:53524] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nail.php"] [unique_id "apcp0q-5XxGfLhlq8xn-5wAAAMI"]
[Tue Sep 01 14:38:58.319843 2026] [:error] [pid 11529:tid 140353248110336] [client 52.139.44.162:47526] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/or.php"] [unique_id "apcp0i580fjDz1VV6yfCwAAAAdA"]
[Tue Sep 01 14:38:58.536004 2026] [:error] [pid 6091:tid 140353222932224] [client 52.139.44.162:47607] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/verox.php"] [unique_id "apcp0skVYOXruxV21N46TAAAAJM"]
[Tue Sep 01 14:38:58.739683 2026] [:error] [pid 6411:tid 140353340430080] [client 52.139.44.162:47551] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ba.php"] [unique_id "apcp0q-5XxGfLhlq8xn-6gAAAMU"]
[Tue Sep 01 14:38:58.941454 2026] [:error] [pid 6090:tid 140353306859264] [client 52.139.44.162:53509] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/great.php"] [unique_id "apcp0rPf1VxWhFqgvWsqogAAAEk"]
[Tue Sep 01 14:38:59.146545 2026] [:error] [pid 28500:tid 140353273288448] [client 52.139.44.162:47536] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "apcp0zQYUm0S3Gh9Jn8udAAAAY0"]
[Tue Sep 01 14:38:59.363291 2026] [:error] [pid 6090:tid 140353290073856] [client 52.139.44.162:47597] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/robots.php"] [unique_id "apcp07Pf1VxWhFqgvWsqowAAAEs"]
[Tue Sep 01 14:38:59.576830 2026] [:error] [pid 6089:tid 140353323644672] [client 52.139.44.162:47543] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sky.php"] [unique_id "apcp05jeM2TaVrIYSc9WqwAAAAc"]
[Tue Sep 01 14:38:59.792834 2026] [:error] [pid 11529:tid 140353348822784] [client 52.139.44.162:47615] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/k.php"] [unique_id "apcp0y580fjDz1VV6yfCwQAAAcQ"]
[Tue Sep 01 14:39:00.017200 2026] [:error] [pid 28500:tid 140353298466560] [client 52.139.44.162:47593] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/w.php"] [unique_id "apcp1DQYUm0S3Gh9Jn8udQAAAYo"]
[Tue Sep 01 14:39:00.226964 2026] [:error] [pid 6091:tid 140353231324928] [client 52.139.44.162:47557] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/FWAZ.php"] [unique_id "apcp1MkVYOXruxV21N46TQAAAJI"]
[Tue Sep 01 14:39:00.438469 2026] [:error] [pid 6091:tid 140353214539520] [client 52.139.44.162:47570] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/blurbs.php"] [unique_id "apcp1MkVYOXruxV21N46TgAAAJQ"]
[Tue Sep 01 14:39:00.647529 2026] [:error] [pid 6089:tid 140353180968704] [client 52.139.44.162:47547] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/100.php"] [unique_id "apcp1JjeM2TaVrIYSc9WrAAAABg"]
[Tue Sep 01 14:39:00.862121 2026] [:error] [pid 6089:tid 140353443960576] [client 52.139.44.162:47581] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ccc.php"] [unique_id "apcp1JjeM2TaVrIYSc9WrQAAAAE"]
[Tue Sep 01 14:39:01.071380 2026] [:error] [pid 6090:tid 140353340430080] [client 52.139.44.162:47587] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/images.php"] [unique_id "apcp1bPf1VxWhFqgvWsqpAAAAEU"]
[Tue Sep 01 14:39:01.279971 2026] [:error] [pid 6090:tid 140353214539520] [client 52.139.44.162:47533] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/alls.php"] [unique_id "apcp1bPf1VxWhFqgvWsqpQAAAFQ"]
[Tue Sep 01 14:39:01.485809 2026] [:error] [pid 29615:tid 140353231324928] [client 52.139.44.162:53525] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/red.php"] [unique_id "apcp1Z1PBa8fnDJM-t7mwgAAAhI"]
[Tue Sep 01 14:39:09.274306 2026] [:error] [pid 29615:tid 140353435567872] [client 52.139.44.162:53512] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin.php"] [unique_id "apcp3Z1PBa8fnDJM-t7mxQAAAgI"]
[Tue Sep 01 14:39:09.488144 2026] [:error] [pid 6411:tid 140353222932224] [client 52.139.44.162:47612] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file52.php"] [unique_id "apcp3a-5XxGfLhlq8xn-_AAAANM"]
[Tue Sep 01 14:39:09.693425 2026] [:error] [pid 6411:tid 140353281681152] [client 52.139.44.162:47505] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/geck.php"] [unique_id "apcp3a-5XxGfLhlq8xn-_gAAAMw"]
[Tue Sep 01 14:39:09.940340 2026] [:error] [pid 6090:tid 140353197754112] [client 52.139.44.162:47510] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/biufile.php"] [unique_id "apcp3bPf1VxWhFqgvWsqqQAAAFY"]
[Tue Sep 01 14:39:10.142984 2026] [:error] [pid 6091:tid 140353332037376] [client 52.139.44.162:53514] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dejavu.php"] [unique_id "apcp3skVYOXruxV21N46UQAAAIY"]
[Tue Sep 01 14:39:10.346655 2026] [:error] [pid 6090:tid 140353298466560] [client 52.139.44.162:47584] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aaf.php"] [unique_id "apcp3rPf1VxWhFqgvWsqqgAAAEo"]
[Tue Sep 01 14:39:10.551575 2026] [:error] [pid 28500:tid 140353231324928] [client 52.139.44.162:47598] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/h02ugyh.php"] [unique_id "apcp3jQYUm0S3Gh9Jn8ufgAAAZI"]
[Tue Sep 01 14:39:10.753734 2026] [:error] [pid 11529:tid 140353323644672] [client 52.139.44.162:47537] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/155.php"] [unique_id "apcp3i580fjDz1VV6yfC3QAAAcc"]
[Tue Sep 01 14:39:10.961448 2026] [:error] [pid 28194:tid 140353332037376] [client 52.139.44.162:47524] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ops.php"] [unique_id "apcp3gdz-EN0cDNAEVJf2AAAAUY"]
[Tue Sep 01 14:39:11.164685 2026] [:error] [pid 6091:tid 140353435567872] [client 52.139.44.162:47508] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mac.php"] [unique_id "apcp38kVYOXruxV21N46UgAAAII"]
[Tue Sep 01 14:39:11.369258 2026] [:error] [pid 9194:tid 140353248110336] [client 52.139.44.162:47613] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/makeasmtp.php"] [unique_id "apcp34dqWCmIAB5WEG-WkAAAARA"]
[Tue Sep 01 14:39:11.571475 2026] [:error] [pid 6411:tid 140353239717632] [client 52.139.44.162:47554] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pucci.php"] [unique_id "apcp36-5XxGfLhlq8xn_AgAAANE"]
[Tue Sep 01 14:39:11.779689 2026] [:error] [pid 6090:tid 140353306859264] [client 52.139.44.162:47614] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/puc.php"] [unique_id "apcp37Pf1VxWhFqgvWsqrAAAAEk"]
[Tue Sep 01 14:39:12.027800 2026] [:error] [pid 6091:tid 140353239717632] [client 52.139.44.162:47503] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/8.php"] [unique_id "apcp4MkVYOXruxV21N46UwAAAJE"]
[Tue Sep 01 14:39:12.231881 2026] [:error] [pid 28194:tid 140353357215488] [client 52.139.44.162:47544] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/1.php"] [unique_id "apcp4Adz-EN0cDNAEVJf2gAAAUM"]
[Tue Sep 01 14:39:12.437076 2026] [:error] [pid 6411:tid 140353306859264] [client 52.139.44.162:47552] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin.php"] [unique_id "apcp4K-5XxGfLhlq8xn_BAAAAMk"]
[Tue Sep 01 14:39:12.636699 2026] [:error] [pid 6089:tid 140353222932224] [client 52.139.44.162:47549] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/edit.php"] [unique_id "apcp4JjeM2TaVrIYSc9WsAAAABM"]
[Tue Sep 01 14:39:12.851020 2026] [:error] [pid 11529:tid 140353231324928] [client 52.139.44.162:47574] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/inputs.php"] [unique_id "apcp4C580fjDz1VV6yfC3wAAAdI"]
[Tue Sep 01 14:39:13.076183 2026] [:error] [pid 11529:tid 140353435567872] [client 52.139.44.162:50507] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/av.php"] [unique_id "apcp4S580fjDz1VV6yfC4AAAAcI"]
[Tue Sep 01 14:39:13.281494 2026] [:error] [pid 6411:tid 140353248110336] [client 52.139.44.162:50520] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/classwithtostring.php"] [unique_id "apcp4a-5XxGfLhlq8xn_BgAAANA"]
[Tue Sep 01 14:39:13.482911 2026] [:error] [pid 6411:tid 140353256503040] [client 52.139.44.162:47504] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminfuns.php"] [unique_id "apcp4a-5XxGfLhlq8xn_BwAAAM8"]
[Tue Sep 01 14:39:13.692290 2026] [:error] [pid 9194:tid 140353315251968] [client 52.139.44.162:47538] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ms-edit.php"] [unique_id "apcp4YdqWCmIAB5WEG-WkgAAAQg"]
[Tue Sep 01 14:39:13.894079 2026] [:error] [pid 6089:tid 140353290073856] [client 52.139.44.162:47596] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/222.php"] [unique_id "apcp4ZjeM2TaVrIYSc9WsQAAAAs"]
[Tue Sep 01 14:39:14.097814 2026] [:error] [pid 6090:tid 140353340430080] [client 52.139.44.162:53508] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/BDKR28WP.php"] [unique_id "apcp4rPf1VxWhFqgvWsqrgAAAEU"]
[Tue Sep 01 14:39:14.310688 2026] [:error] [pid 6411:tid 140353239717632] [client 52.139.44.162:47521] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp.php"] [unique_id "apcp4q-5XxGfLhlq8xn_DAAAANE"]
[Tue Sep 01 14:39:14.519752 2026] [:error] [pid 28500:tid 140353435567872] [client 52.139.44.162:47520] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/abcd.php"] [unique_id "apcp4jQYUm0S3Gh9Jn8ugQAAAYI"]
[Tue Sep 01 14:39:14.724835 2026] [:error] [pid 6090:tid 140353256503040] [client 52.139.44.162:53545] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/simple.php"] [unique_id "apcp4rPf1VxWhFqgvWsqrwAAAE8"]
[Tue Sep 01 14:39:14.956965 2026] [:error] [pid 6089:tid 140353231324928] [client 52.139.44.162:47610] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/chosen.php"] [unique_id "apcp4pjeM2TaVrIYSc9WswAAABI"]
[Tue Sep 01 14:39:15.176616 2026] [:error] [pid 6089:tid 140353239717632] [client 52.139.44.162:47493] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/als.php"] [unique_id "apcp45jeM2TaVrIYSc9WtAAAABE"]
[Tue Sep 01 14:39:15.381660 2026] [:error] [pid 11529:tid 140353180968704] [client 52.139.44.162:47609] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nox.php"] [unique_id "apcp4y580fjDz1VV6yfC4gAAAdg"]
[Tue Sep 01 14:39:15.585817 2026] [:error] [pid 6091:tid 140353189361408] [client 52.139.44.162:47516] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file59.php"] [unique_id "apcp48kVYOXruxV21N46VQAAAJc"]
[Tue Sep 01 14:39:15.788736 2026] [:error] [pid 6091:tid 140353206146816] [client 52.139.44.162:47577] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin.php"] [unique_id "apcp48kVYOXruxV21N46VgAAAJU"]
[Tue Sep 01 14:39:16.028317 2026] [:error] [pid 6090:tid 140353452353280] [client 52.139.44.162:53560] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xamp.php"] [unique_id "apcp5LPf1VxWhFqgvWsqsAAAAEA"]
[Tue Sep 01 14:39:16.253611 2026] [:error] [pid 28194:tid 140353189361408] [client 52.139.44.162:47492] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bless.php"] [unique_id "apcp5Adz-EN0cDNAEVJf3wAAAVc"]
[Tue Sep 01 14:39:16.465598 2026] [:error] [pid 28500:tid 140353443960576] [client 52.139.44.162:47601] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/f35.php"] [unique_id "apcp5DQYUm0S3Gh9Jn8uhAAAAYE"]
[Tue Sep 01 14:39:16.665113 2026] [:error] [pid 28500:tid 140353214539520] [client 52.139.44.162:47495] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aaa.php"] [unique_id "apcp5DQYUm0S3Gh9Jn8uhQAAAZQ"]
[Tue Sep 01 14:39:16.888727 2026] [:error] [pid 29615:tid 140353222932224] [client 52.139.44.162:47611] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gecko.php"] [unique_id "apcp5J1PBa8fnDJM-t7myAAAAhM"]
[Tue Sep 01 14:39:17.102499 2026] [:error] [pid 6411:tid 140353290073856] [client 52.139.44.162:47528] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xiugai.php"] [unique_id "apcp5a-5XxGfLhlq8xn_EgAAAMs"]
[Tue Sep 01 14:39:17.316778 2026] [:error] [pid 6090:tid 140353281681152] [client 52.139.44.162:47548] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminner.php"] [unique_id "apcp5bPf1VxWhFqgvWsqsQAAAEw"]
[Tue Sep 01 14:39:17.522405 2026] [:error] [pid 28500:tid 140353315251968] [client 52.139.44.162:53518] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file1221.php"] [unique_id "apcp5TQYUm0S3Gh9Jn8uhgAAAYg"]
[Tue Sep 01 14:39:17.728708 2026] [:error] [pid 11529:tid 140353443960576] [client 52.139.44.162:53511] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/inx.php"] [unique_id "apcp5S580fjDz1VV6yfC5wAAAcE"]
[Tue Sep 01 14:39:17.949904 2026] [:error] [pid 6090:tid 140353435567872] [client 52.139.44.162:53518] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/reviall.php"] [unique_id "apcp5bPf1VxWhFqgvWsqsgAAAEI"]
[Tue Sep 01 14:39:18.159373 2026] [:error] [pid 9194:tid 140353231324928] [client 52.139.44.162:47589] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/11.php"] [unique_id "apcp5odqWCmIAB5WEG-WlAAAARI"]
[Tue Sep 01 14:39:18.374365 2026] [:error] [pid 9194:tid 140353443960576] [client 52.139.44.162:47571] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/File.php"] [unique_id "apcp5odqWCmIAB5WEG-WlQAAAQE"]
[Tue Sep 01 14:39:18.577775 2026] [:error] [pid 28500:tid 140353189361408] [client 52.139.44.162:47594] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fi22.php"] [unique_id "apcp5jQYUm0S3Gh9Jn8ujAAAAZc"]
[Tue Sep 01 14:39:18.785428 2026] [:error] [pid 9194:tid 140353323644672] [client 52.139.44.162:53515] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apcp5odqWCmIAB5WEG-WlgAAAQc"]
[Tue Sep 01 14:39:19.000420 2026] [:error] [pid 9194:tid 140353189361408] [client 52.139.44.162:53517] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "apcp5odqWCmIAB5WEG-WlwAAARc"]
[Tue Sep 01 14:39:19.226464 2026] [:error] [pid 6411:tid 140353206146816] [client 52.139.44.162:47498] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apcp56-5XxGfLhlq8xn_FwAAANU"]
[Tue Sep 01 14:39:19.452078 2026] [:error] [pid 6091:tid 140353340430080] [client 52.139.44.162:47517] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "apcp58kVYOXruxV21N46VwAAAIU"]
[Tue Sep 01 14:39:19.657075 2026] [:error] [pid 6090:tid 140353189361408] [client 52.139.44.162:50515] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "apcp57Pf1VxWhFqgvWsqtQAAAFc"]
[Tue Sep 01 14:39:19.862254 2026] [:error] [pid 28194:tid 140353197754112] [client 52.139.44.162:47506] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "apcp5wdz-EN0cDNAEVJf5QAAAVY"]
[Tue Sep 01 14:39:20.095878 2026] [:error] [pid 6091:tid 140353323644672] [client 52.139.44.162:53526] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/media.php"] [unique_id "apcp6MkVYOXruxV21N46WAAAAIc"]
[Tue Sep 01 14:39:20.340370 2026] [:error] [pid 29615:tid 140353443960576] [client 52.139.44.162:47509] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/inso.php"] [unique_id "apcp6J1PBa8fnDJM-t7myQAAAgE"]
[Tue Sep 01 14:39:20.557906 2026] [:error] [pid 28500:tid 140353348822784] [client 52.139.44.162:53505] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/shiny.php"] [unique_id "apcp6DQYUm0S3Gh9Jn8ujwAAAYQ"]
[Tue Sep 01 14:39:20.768776 2026] [:error] [pid 6411:tid 140353357215488] [client 52.139.44.162:50512] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/403dd.php"] [unique_id "apcp6K-5XxGfLhlq8xn_GQAAAMM"]
[Tue Sep 01 14:39:21.022596 2026] [:error] [pid 28500:tid 140353264895744] [client 52.139.44.162:53527] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/baba.php"] [unique_id "apcp6TQYUm0S3Gh9Jn8ukQAAAY4"]
[Tue Sep 01 14:39:21.256515 2026] [:error] [pid 6411:tid 140353443960576] [client 52.139.44.162:50500] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/site.php"] [unique_id "apcp6a-5XxGfLhlq8xn_GgAAAME"]
[Tue Sep 01 14:39:21.493183 2026] [:error] [pid 6411:tid 140353332037376] [client 52.139.44.162:47567] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cabs.php"] [unique_id "apcp6a-5XxGfLhlq8xn_HQAAAMY"]
[Tue Sep 01 14:39:21.702225 2026] [:error] [pid 6090:tid 140353264895744] [client 52.139.44.162:53513] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/insc.php"] [unique_id "apcp6bPf1VxWhFqgvWsqtwAAAE4"]
[Tue Sep 01 14:39:21.904528 2026] [:error] [pid 6411:tid 140353273288448] [client 52.139.44.162:50540] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file.php"] [unique_id "apcp6a-5XxGfLhlq8xn_HwAAAM0"]
[Tue Sep 01 14:39:22.115251 2026] [:error] [pid 28194:tid 140353256503040] [client 52.139.44.162:47488] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dex.php"] [unique_id "apcp6gdz-EN0cDNAEVJf6AAAAU8"]
[Tue Sep 01 14:39:22.323368 2026] [:error] [pid 11529:tid 140353248110336] [client 52.139.44.162:53563] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/key.php"] [unique_id "apcp6i580fjDz1VV6yfC6QAAAdA"]
[Tue Sep 01 14:39:22.529028 2026] [:error] [pid 11529:tid 140353197754112] [client 52.139.44.162:58327] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kir.php"] [unique_id "apcp6i580fjDz1VV6yfC6gAAAdY"]
[Tue Sep 01 14:39:22.734890 2026] [:error] [pid 11529:tid 140353256503040] [client 52.139.44.162:47530] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nofile.php"] [unique_id "apcp6i580fjDz1VV6yfC6wAAAc8"]
[Tue Sep 01 14:39:22.948123 2026] [:error] [pid 6090:tid 140353340430080] [client 52.139.44.162:47578] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fling.php"] [unique_id "apcp6rPf1VxWhFqgvWsquQAAAEU"]
[Tue Sep 01 14:39:23.168759 2026] [:error] [pid 29615:tid 140353332037376] [client 52.139.44.162:58311] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/btyuio.php"] [unique_id "apcp651PBa8fnDJM-t7mzAAAAgY"]
[Tue Sep 01 14:39:23.380074 2026] [:error] [pid 6090:tid 140353452353280] [client 52.139.44.162:47580] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/00zip.php"] [unique_id "apcp67Pf1VxWhFqgvWsqugAAAEA"]
[Tue Sep 01 14:39:23.596544 2026] [:error] [pid 6090:tid 140353435567872] [client 52.139.44.162:47491] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/silver.php"] [unique_id "apcp67Pf1VxWhFqgvWsquwAAAEI"]
[Tue Sep 01 14:39:23.801012 2026] [:error] [pid 11529:tid 140353348822784] [client 52.139.44.162:47576] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-mails.php"] [unique_id "apcp6y580fjDz1VV6yfC7AAAAcQ"]
[Tue Sep 01 14:39:24.004297 2026] [:error] [pid 29615:tid 140353290073856] [client 52.139.44.162:50523] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sm.php"] [unique_id "apcp7J1PBa8fnDJM-t7mzQAAAgs"]
[Tue Sep 01 14:39:24.259703 2026] [:error] [pid 28500:tid 140353315251968] [client 52.139.44.162:53564] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/araso.php"] [unique_id "apcp7DQYUm0S3Gh9Jn8ulAAAAYg"]
[Tue Sep 01 14:39:24.466846 2026] [:error] [pid 6090:tid 140353298466560] [client 52.139.44.162:53554] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a.php"] [unique_id "apcp7LPf1VxWhFqgvWsqvgAAAEo"]
[Tue Sep 01 14:39:24.668800 2026] [:error] [pid 28194:tid 140353348822784] [client 52.139.44.162:47564] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sb.php"] [unique_id "apcp7Adz-EN0cDNAEVJf6wAAAUQ"]
[Tue Sep 01 14:39:24.873453 2026] [:error] [pid 29615:tid 140353323644672] [client 52.139.44.162:50498] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/in.php"] [unique_id "apcp7J1PBa8fnDJM-t7mzgAAAgc"]
[Tue Sep 01 14:39:25.078530 2026] [:error] [pid 6089:tid 140353214539520] [client 52.139.44.162:50517] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xnm-apc.php"] [unique_id "apcp7ZjeM2TaVrIYSc9WuAAAABQ"]
[Tue Sep 01 14:39:25.290607 2026] [:error] [pid 11529:tid 140353180968704] [client 52.139.44.162:47573] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminimagess.php"] [unique_id "apcp7S580fjDz1VV6yfC7gAAAdg"]
[Tue Sep 01 14:39:25.512723 2026] [:error] [pid 9194:tid 140353340430080] [client 52.139.44.162:47542] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/index.php"] [unique_id "apcp7YdqWCmIAB5WEG-WmgAAAQU"]
[Tue Sep 01 14:39:25.717567 2026] [:error] [pid 6411:tid 140353214539520] [client 52.139.44.162:47502] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "apcp7a-5XxGfLhlq8xn_IgAAANQ"]
[Tue Sep 01 14:39:25.925600 2026] [:error] [pid 28500:tid 140353189361408] [client 52.139.44.162:50508] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/"] [unique_id "apcp7TQYUm0S3Gh9Jn8ulgAAAZc"]
[Tue Sep 01 14:39:26.149749 2026] [:error] [pid 28194:tid 140353452353280] [client 52.139.44.162:50538] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "apcp7gdz-EN0cDNAEVJf7wAAAUA"]
[Tue Sep 01 14:39:26.355926 2026] [:error] [pid 28194:tid 140353180968704] [client 52.139.44.162:50526] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/blocks/details/"] [unique_id "apcp7gdz-EN0cDNAEVJf8AAAAVg"]
[Tue Sep 01 14:39:26.595537 2026] [:error] [pid 9194:tid 140353306859264] [client 52.139.44.162:50537] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "apcp7odqWCmIAB5WEG-WmwAAAQk"]
[Tue Sep 01 14:39:26.800891 2026] [:error] [pid 28194:tid 140353273288448] [client 52.139.44.162:47500] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-temp.php"] [unique_id "apcp7gdz-EN0cDNAEVJf8gAAAU0"]
[Tue Sep 01 14:39:27.027214 2026] [:error] [pid 6411:tid 140353348822784] [client 52.139.44.162:47582] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/js/index.php"] [unique_id "apcp76-5XxGfLhlq8xn_IwAAAMQ"]
[Tue Sep 01 14:39:27.256233 2026] [:error] [pid 11529:tid 140353281681152] [client 52.139.44.162:47525] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/Requests/"] [unique_id "apcp7y580fjDz1VV6yfC8AAAAcw"]
[Tue Sep 01 14:39:27.468994 2026] [:error] [pid 6090:tid 140353306859264] [client 52.139.44.162:53521] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/admin.php"] [unique_id "apcp77Pf1VxWhFqgvWsqxQAAAEk"]
[Tue Sep 01 14:39:27.672514 2026] [:error] [pid 6411:tid 140353443960576] [client 52.139.44.162:47568] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/themes/index.php"] [unique_id "apcp76-5XxGfLhlq8xn_JAAAAME"]
[Tue Sep 01 14:39:27.878944 2026] [:error] [pid 6411:tid 140353452353280] [client 52.139.44.162:53534] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/av.php"] [unique_id "apcp76-5XxGfLhlq8xn_JgAAAMA"]
[Tue Sep 01 14:39:28.085565 2026] [:error] [pid 28500:tid 140353435567872] [client 52.139.44.162:47522] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/themes/index.php"] [unique_id "apcp8DQYUm0S3Gh9Jn8unAAAAYI"]
[Tue Sep 01 14:39:28.321798 2026] [:error] [pid 11529:tid 140353290073856] [client 52.139.44.162:47592] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-blog.php"] [unique_id "apcp8C580fjDz1VV6yfC8QAAAcs"]
[Tue Sep 01 14:39:28.528074 2026] [:error] [pid 6090:tid 140353256503040] [client 52.139.44.162:47545] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/js/jquery/"] [unique_id "apcp8LPf1VxWhFqgvWsqxwAAAE8"]
[Tue Sep 01 14:39:28.731273 2026] [:error] [pid 11529:tid 140353206146816] [client 52.139.44.162:53556] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cgi-bin/index.php"] [unique_id "apcp8C580fjDz1VV6yfC8gAAAdU"]
[Tue Sep 01 14:39:28.937041 2026] [:error] [pid 6090:tid 140353180968704] [client 52.139.44.162:58324] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/l10n/"] [unique_id "apcp8LPf1VxWhFqgvWsqyQAAAFg"]
[Tue Sep 01 14:39:29.145782 2026] [:error] [pid 29615:tid 140353281681152] [client 52.139.44.162:47527] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-manager.php"] [unique_id "apcp8Z1PBa8fnDJM-t7m0gAAAgw"]
[Tue Sep 01 14:39:29.375290 2026] [:error] [pid 9194:tid 140353315251968] [client 52.139.44.162:53540] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "apcp8YdqWCmIAB5WEG-WnQAAAQg"]
[Tue Sep 01 14:39:29.586076 2026] [:error] [pid 28500:tid 140353273288448] [client 52.139.44.162:53562] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cgi-bin/admin.php"] [unique_id "apcp8TQYUm0S3Gh9Jn8unQAAAY0"]
[Tue Sep 01 14:39:29.814590 2026] [:error] [pid 28500:tid 140353214539520] [client 52.139.44.162:50504] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/"] [unique_id "apcp8TQYUm0S3Gh9Jn8ungAAAZQ"]
[Tue Sep 01 14:39:30.041844 2026] [:error] [pid 9194:tid 140353231324928] [client 52.139.44.162:50544] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "apcp8odqWCmIAB5WEG-WnwAAARI"]
[Tue Sep 01 14:39:30.245620 2026] [:error] [pid 9194:tid 140353443960576] [client 52.139.44.162:47531] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/block-bindings/"] [unique_id "apcp8odqWCmIAB5WEG-WoAAAAQE"]
[Tue Sep 01 14:39:30.458202 2026] [:error] [pid 11529:tid 140353197754112] [client 52.139.44.162:53543] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/assets/"] [unique_id "apcp8i580fjDz1VV6yfC9AAAAdY"]
[Tue Sep 01 14:39:30.668434 2026] [:error] [pid 28194:tid 140353298466560] [client 52.139.44.162:50514] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "apcp8gdz-EN0cDNAEVJf-AAAAUo"]
[Tue Sep 01 14:39:30.895742 2026] [:error] [pid 6091:tid 140353452353280] [client 52.139.44.162:47534] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "apcp8skVYOXruxV21N46WQAAAIA"]
[Tue Sep 01 14:39:31.113937 2026] [:error] [pid 28500:tid 140353180968704] [client 52.139.44.162:50506] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apcp8zQYUm0S3Gh9Jn8uoAAAAZg"]
[Tue Sep 01 14:39:31.319966 2026] [:error] [pid 11529:tid 140353231324928] [client 52.139.44.162:53529] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "apcp8y580fjDz1VV6yfC9QAAAdI"]
[Tue Sep 01 14:39:31.540162 2026] [:error] [pid 28194:tid 140353222932224] [client 52.139.44.162:50509] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/qazwsx.php"] [unique_id "apcp8wdz-EN0cDNAEVJf-QAAAVM"]
[Tue Sep 01 14:39:31.753713 2026] [:error] [pid 9194:tid 140353348822784] [client 52.139.44.162:53539] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cae2.2.php"] [unique_id "apcp84dqWCmIAB5WEG-WogAAAQQ"]
[Tue Sep 01 14:39:31.955549 2026] [:error] [pid 6090:tid 140353357215488] [client 52.139.44.162:50497] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/b8.php"] [unique_id "apcp87Pf1VxWhFqgvWsqzQAAAEM"]
[Tue Sep 01 14:39:32.161281 2026] [:error] [pid 6411:tid 140353214539520] [client 52.139.44.162:53521] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xs.php"] [unique_id "apcp9K-5XxGfLhlq8xn_LgAAANQ"]
[Tue Sep 01 14:39:32.385856 2026] [:error] [pid 6090:tid 140353197754112] [client 52.139.44.162:53522] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/uploads/"] [unique_id "apcp9LPf1VxWhFqgvWsqzgAAAFY"]
[Tue Sep 01 14:39:32.592469 2026] [:error] [pid 6411:tid 140353281681152] [client 52.139.44.162:47608] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp_blog_footer.php"] [unique_id "apcp9K-5XxGfLhlq8xn_LwAAAMw"]
[Tue Sep 01 14:39:32.797408 2026] [:error] [pid 6089:tid 140353206146816] [client 52.139.44.162:47519] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/billzgs.php"] [unique_id "apcp9JjeM2TaVrIYSc9WugAAABU"]
[Tue Sep 01 14:39:33.003204 2026] [:error] [pid 6091:tid 140353281681152] [client 52.139.44.162:50547] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ded.php"] [unique_id "apcp9ckVYOXruxV21N46WgAAAIw"]
[Tue Sep 01 14:39:33.209526 2026] [:error] [pid 6411:tid 140353357215488] [client 52.139.44.162:47606] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/CAE-2.5.php"] [unique_id "apcp9a-5XxGfLhlq8xn_MQAAAMM"]
[Tue Sep 01 14:39:33.471600 2026] [:error] [pid 6411:tid 140353239717632] [client 52.139.44.162:47590] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/0.php"] [unique_id "apcp9a-5XxGfLhlq8xn_MgAAANE"]
[Tue Sep 01 14:39:33.674082 2026] [:error] [pid 11529:tid 140353298466560] [client 52.139.44.162:50499] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "apcp9S580fjDz1VV6yfC9wAAAco"]
[Tue Sep 01 14:39:33.876504 2026] [:error] [pid 6411:tid 140353180968704] [client 52.139.44.162:53536] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/8xmlr9ommwdy3ro8dCdefault.php"] [unique_id "apcp9a-5XxGfLhlq8xn_MwAAANg"]
[Tue Sep 01 14:39:34.088613 2026] [:error] [pid 6411:tid 140353340430080] [client 52.139.44.162:47575] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fms.php"] [unique_id "apcp9q-5XxGfLhlq8xn_NQAAAMU"]
[Tue Sep 01 14:39:34.293041 2026] [:error] [pid 29615:tid 140353443960576] [client 52.139.44.162:47529] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/0day.php"] [unique_id "apcp9p1PBa8fnDJM-t7m1QAAAgE"]
[Tue Sep 01 14:39:34.500216 2026] [:error] [pid 6411:tid 140353264895744] [client 52.139.44.162:50525] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/das.php"] [unique_id "apcp9q-5XxGfLhlq8xn_NgAAAM4"]
[Tue Sep 01 14:53:17.747810 2026] [:error] [pid 28500:tid 140353332037376] [client 52.139.44.162:35136] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apctLTQYUm0S3Gh9Jn8yHgAAAYY"]
[Tue Sep 01 14:53:17.954408 2026] [:error] [pid 6090:tid 140353197754112] [client 52.139.44.162:35704] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apctLbPf1VxWhFqgvWssogAAAFY"]
[Tue Sep 01 14:53:18.155940 2026] [:error] [pid 9194:tid 140353281681152] [client 52.139.44.162:35184] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/aaaa.php"] [unique_id "apctLodqWCmIAB5WEG-YawAAAQw"]
[Tue Sep 01 14:53:18.356050 2026] [:error] [pid 6411:tid 140353231324928] [client 52.139.44.162:35653] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/config.php"] [unique_id "apctLq-5XxGfLhlq8xkGBQAAANI"]
[Tue Sep 01 14:53:18.561106 2026] [:error] [pid 6089:tid 140353281681152] [client 52.139.44.162:35173] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ho.php"] [unique_id "apctLpjeM2TaVrIYSc9YgwAAAAw"]
[Tue Sep 01 14:53:18.775126 2026] [:error] [pid 6090:tid 140353281681152] [client 52.139.44.162:35183] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/x.php"] [unique_id "apctLrPf1VxWhFqgvWssowAAAEw"]
[Tue Sep 01 14:53:18.978694 2026] [:error] [pid 6411:tid 140353214539520] [client 52.139.44.162:35690] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/min.php"] [unique_id "apctLq-5XxGfLhlq8xkGBwAAANQ"]
[Tue Sep 01 14:53:19.178254 2026] [:error] [pid 6089:tid 140353315251968] [client 52.139.44.162:35139] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/kir.php"] [unique_id "apctL5jeM2TaVrIYSc9YhAAAAAg"]
[Tue Sep 01 14:53:19.383538 2026] [:error] [pid 6411:tid 140353443960576] [client 52.139.44.162:35185] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/f35.update.php"] [unique_id "apctL6-5XxGfLhlq8xkGCAAAAME"]
[Tue Sep 01 14:53:19.586256 2026] [:error] [pid 6411:tid 140353357215488] [client 52.139.44.162:35650] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/admin1.php"] [unique_id "apctL6-5XxGfLhlq8xkGCQAAAMM"]
[Tue Sep 01 14:53:19.801752 2026] [:error] [pid 9194:tid 140353340430080] [client 52.139.44.162:35682] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/silver.php"] [unique_id "apctL4dqWCmIAB5WEG-YbQAAAQU"]
[Tue Sep 01 14:53:20.006345 2026] [:error] [pid 9194:tid 140353348822784] [client 52.139.44.162:35161] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file-gertdxz.php"] [unique_id "apctMIdqWCmIAB5WEG-YbgAAAQQ"]
[Tue Sep 01 14:53:20.207878 2026] [:error] [pid 9194:tid 140353197754112] [client 52.139.44.162:35180] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ddd.php"] [unique_id "apctMIdqWCmIAB5WEG-YbwAAARY"]
[Tue Sep 01 14:53:20.411856 2026] [:error] [pid 6411:tid 140353248110336] [client 52.139.44.162:35662] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file58.php"] [unique_id "apctMK-5XxGfLhlq8xkGCwAAANA"]
[Tue Sep 01 14:53:20.613831 2026] [:error] [pid 6090:tid 140353323644672] [client 52.139.44.162:34963] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/888.php"] [unique_id "apctMLPf1VxWhFqgvWsspAAAAEc"]
[Tue Sep 01 14:53:20.821508 2026] [:error] [pid 6090:tid 140353340430080] [client 52.139.44.162:35191] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/bibil.php"] [unique_id "apctMLPf1VxWhFqgvWsspQAAAEU"]
[Tue Sep 01 14:53:21.021427 2026] [:error] [pid 9194:tid 140353189361408] [client 52.139.44.162:35152] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file48.php"] [unique_id "apctMYdqWCmIAB5WEG-YcQAAARc"]
[Tue Sep 01 14:53:21.221729 2026] [:error] [pid 9194:tid 140353357215488] [client 52.139.44.162:35148] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file10.php"] [unique_id "apctMYdqWCmIAB5WEG-YcgAAAQM"]
[Tue Sep 01 14:53:21.423296 2026] [:error] [pid 6411:tid 140353452353280] [client 52.139.44.162:34945] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/moon.php"] [unique_id "apctMa-5XxGfLhlq8xkGDAAAAMA"]
[Tue Sep 01 14:53:21.626439 2026] [:error] [pid 11529:tid 140353239717632] [client 52.139.44.162:35159] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file88.php"] [unique_id "apctMS580fjDz1VV6yfHGQAAAdE"]
[Tue Sep 01 14:53:21.833651 2026] [:error] [pid 6411:tid 140353298466560] [client 52.139.44.162:35154] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/class.5.php"] [unique_id "apctMa-5XxGfLhlq8xkGDQAAAMo"]
[Tue Sep 01 14:53:22.040339 2026] [:error] [pid 6411:tid 140353206146816] [client 52.139.44.162:35707] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/class.2.php"] [unique_id "apctMq-5XxGfLhlq8xkGDgAAANU"]
[Tue Sep 01 14:53:22.239793 2026] [:error] [pid 28500:tid 140353214539520] [client 52.139.44.162:35659] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cccc.php"] [unique_id "apctMjQYUm0S3Gh9Jn8yIAAAAZQ"]
[Tue Sep 01 14:53:22.440707 2026] [:error] [pid 6411:tid 140353332037376] [client 52.139.44.162:35175] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/efile.php"] [unique_id "apctMq-5XxGfLhlq8xkGEQAAAMY"]
[Tue Sep 01 14:53:22.644510 2026] [:error] [pid 29615:tid 140353189361408] [client 52.139.44.162:35656] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/dox.php"] [unique_id "apctMp1PBa8fnDJM-t7omQAAAhc"]
[Tue Sep 01 14:53:22.849007 2026] [:error] [pid 6411:tid 140353256503040] [client 52.139.44.162:35691] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/b8.php"] [unique_id "apctMq-5XxGfLhlq8xkGEwAAAM8"]
[Tue Sep 01 14:53:23.052199 2026] [:error] [pid 11529:tid 140353332037376] [client 52.139.44.162:35163] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file9.php"] [unique_id "apctMy580fjDz1VV6yfHGwAAAcY"]
[Tue Sep 01 14:53:23.251601 2026] [:error] [pid 28500:tid 140353298466560] [client 52.139.44.162:35145] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file8.php"] [unique_id "apctMzQYUm0S3Gh9Jn8yIQAAAYo"]
[Tue Sep 01 14:53:23.451584 2026] [:error] [pid 6411:tid 140353290073856] [client 52.139.44.162:35692] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file6.php"] [unique_id "apctM6-5XxGfLhlq8xkGFQAAAMs"]
[Tue Sep 01 14:53:23.653353 2026] [:error] [pid 6411:tid 140353323644672] [client 52.139.44.162:35696] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file4.php"] [unique_id "apctM6-5XxGfLhlq8xkGFgAAAMc"]
[Tue Sep 01 14:53:23.856753 2026] [:error] [pid 6089:tid 140353290073856] [client 52.139.44.162:35193] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/media.php"] [unique_id "apctM5jeM2TaVrIYSc9YhQAAAAs"]
[Tue Sep 01 14:53:24.059018 2026] [:error] [pid 28194:tid 140353222932224] [client 52.139.44.162:34992] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/adminfuns.php"] [unique_id "apctNAdz-EN0cDNAEVJhbwAAAVM"]
[Tue Sep 01 14:53:24.259475 2026] [:error] [pid 6411:tid 140353273288448] [client 52.139.44.162:35668] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/classwithtostring.php"] [unique_id "apctNK-5XxGfLhlq8xkGGAAAAM0"]
[Tue Sep 01 14:53:24.461874 2026] [:error] [pid 29615:tid 140353323644672] [client 52.139.44.162:35198] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apctNJ1PBa8fnDJM-t7omgAAAgc"]
[Tue Sep 01 14:53:24.661473 2026] [:error] [pid 6411:tid 140353298466560] [client 52.139.44.162:34955] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apctNK-5XxGfLhlq8xkGGQAAAMo"]
[Tue Sep 01 14:53:24.885083 2026] [:error] [pid 28194:tid 140353452353280] [client 52.139.44.162:35177] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wsd.php"] [unique_id "apctNAdz-EN0cDNAEVJhcAAAAUA"]
[Tue Sep 01 14:53:25.087421 2026] [:error] [pid 6411:tid 140353206146816] [client 52.139.44.162:35701] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/bulet.php"] [unique_id "apctNa-5XxGfLhlq8xkGGgAAANU"]
[Tue Sep 01 14:53:25.287582 2026] [:error] [pid 6411:tid 140353332037376] [client 52.139.44.162:35665] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/av.php"] [unique_id "apctNa-5XxGfLhlq8xkGGwAAAMY"]
[Tue Sep 01 14:53:25.491788 2026] [:error] [pid 29615:tid 140353281681152] [client 52.139.44.162:35188] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/images.php"] [unique_id "apctNZ1PBa8fnDJM-t7omwAAAgw"]
[Tue Sep 01 14:53:25.695431 2026] [:error] [pid 6090:tid 140353214539520] [client 52.139.44.162:35681] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ops.php"] [unique_id "apctNbPf1VxWhFqgvWssqQAAAFQ"]
[Tue Sep 01 14:53:25.906572 2026] [:error] [pid 6411:tid 140353214539520] [client 52.139.44.162:35149] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/BDKR28WP.php"] [unique_id "apctNa-5XxGfLhlq8xkGHAAAANQ"]
[Tue Sep 01 14:53:26.107359 2026] [:error] [pid 6091:tid 140353273288448] [client 52.139.44.162:34950] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/k.php"] [unique_id "apctNskVYOXruxV21N471wAAAI0"]
[Tue Sep 01 14:53:26.308752 2026] [:error] [pid 6411:tid 140353256503040] [client 52.139.44.162:35172] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/dex.php"] [unique_id "apctNq-5XxGfLhlq8xkGHgAAAM8"]
[Tue Sep 01 14:53:26.514099 2026] [:error] [pid 9194:tid 140353231324928] [client 52.139.44.162:35694] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/img.php"] [unique_id "apctNodqWCmIAB5WEG-YcwAAARI"]
[Tue Sep 01 14:53:26.713983 2026] [:error] [pid 6411:tid 140353290073856] [client 52.139.44.162:35651] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/222.php"] [unique_id "apctNq-5XxGfLhlq8xkGHwAAAMs"]
[Tue Sep 01 14:53:26.944789 2026] [:error] [pid 28194:tid 140353256503040] [client 52.139.44.162:35137] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/key.php"] [unique_id "apctNgdz-EN0cDNAEVJhcwAAAU8"]
[Tue Sep 01 14:53:27.145426 2026] [:error] [pid 6411:tid 140353222932224] [client 52.139.44.162:35697] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/chosen.php"] [unique_id "apctN6-5XxGfLhlq8xkGIAAAANM"]
[Tue Sep 01 14:53:27.360018 2026] [:error] [pid 28500:tid 140353197754112] [client 52.139.44.162:35092] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file1221.php"] [unique_id "apctNzQYUm0S3Gh9Jn8yIwAAAZY"]
[Tue Sep 01 14:53:27.568296 2026] [:error] [pid 29615:tid 140353306859264] [client 52.139.44.162:35652] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/nox.php"] [unique_id "apctN51PBa8fnDJM-t7ongAAAgk"]
[Tue Sep 01 14:53:27.771036 2026] [:error] [pid 6411:tid 140353315251968] [client 52.139.44.162:34975] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/1.php"] [unique_id "apctN6-5XxGfLhlq8xkGIgAAAMg"]
[Tue Sep 01 14:53:27.992943 2026] [:error] [pid 6091:tid 140353348822784] [client 52.139.44.162:35165] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/m.php"] [unique_id "apctN8kVYOXruxV21N472AAAAIQ"]
[Tue Sep 01 14:53:28.192156 2026] [:error] [pid 6411:tid 140353281681152] [client 52.139.44.162:35176] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/fling.php"] [unique_id "apctOK-5XxGfLhlq8xkGJQAAAMw"]
[Tue Sep 01 14:53:28.403300 2026] [:error] [pid 6411:tid 140353214539520] [client 52.139.44.162:35166] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/btyuio.php"] [unique_id "apctOK-5XxGfLhlq8xkGJgAAANQ"]
[Tue Sep 01 14:53:28.610921 2026] [:error] [pid 6411:tid 140353256503040] [client 52.139.44.162:35708] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/dehnl.php"] [unique_id "apctOK-5XxGfLhlq8xkGKQAAAM8"]
[Tue Sep 01 14:53:28.879847 2026] [:error] [pid 6089:tid 140353264895744] [client 52.139.44.162:35695] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/zoo1.php"] [unique_id "apctOJjeM2TaVrIYSc9YigAAAA4"]
[Tue Sep 01 14:53:29.143323 2026] [:error] [pid 28500:tid 140353315251968] [client 52.139.44.162:35078] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/radio.php"] [unique_id "apctOTQYUm0S3Gh9Jn8yJAAAAYg"]
[Tue Sep 01 14:53:29.383532 2026] [:error] [pid 28500:tid 140353206146816] [client 52.139.44.162:35167] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/one.php"] [unique_id "apctOTQYUm0S3Gh9Jn8yJgAAAZU"]
[Tue Sep 01 14:53:29.597222 2026] [:error] [pid 9194:tid 140353340430080] [client 52.139.44.162:35197] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/504.php"] [unique_id "apctOYdqWCmIAB5WEG-YdAAAAQU"]
[Tue Sep 01 14:53:29.797978 2026] [:error] [pid 6090:tid 140353231324928] [client 52.139.44.162:35158] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ano.php"] [unique_id "apctObPf1VxWhFqgvWssqgAAAFI"]
[Tue Sep 01 14:53:30.057003 2026] [:error] [pid 11529:tid 140353189361408] [client 52.139.44.162:35072] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/mac.php"] [unique_id "apctOi580fjDz1VV6yfHHAAAAdc"]
[Tue Sep 01 14:53:30.268050 2026] [:error] [pid 28500:tid 140353323644672] [client 52.139.44.162:35144] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/simple.php"] [unique_id "apctOjQYUm0S3Gh9Jn8yJwAAAYc"]
[Tue Sep 01 14:53:30.483600 2026] [:error] [pid 6091:tid 140353222932224] [client 52.139.44.162:35140] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sallu.php"] [unique_id "apctOskVYOXruxV21N472QAAAJM"]
[Tue Sep 01 14:53:30.696361 2026] [:error] [pid 9194:tid 140353248110336] [client 52.139.44.162:35199] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/biufile.php"] [unique_id "apctOodqWCmIAB5WEG-YdQAAARA"]
[Tue Sep 01 14:53:30.896167 2026] [:error] [pid 11529:tid 140353298466560] [client 52.139.44.162:35155] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/blacks.php"] [unique_id "apctOi580fjDz1VV6yfHHwAAAco"]
[Tue Sep 01 14:53:31.175250 2026] [:error] [pid 6411:tid 140353306859264] [client 52.139.44.162:35195] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp.php"] [unique_id "apctO6-5XxGfLhlq8xkGKgAAAMk"]
[Tue Sep 01 14:53:31.379063 2026] [:error] [pid 11529:tid 140353348822784] [client 52.139.44.162:35143] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wander.php"] [unique_id "apctOy580fjDz1VV6yfHIQAAAcQ"]
[Tue Sep 01 14:53:31.584349 2026] [:error] [pid 28500:tid 140353348822784] [client 52.139.44.162:35094] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/abcd.php"] [unique_id "apctOzQYUm0S3Gh9Jn8yKAAAAYQ"]
[Tue Sep 01 14:53:31.787188 2026] [:error] [pid 28500:tid 140353273288448] [client 52.139.44.162:35187] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/nofile.php"] [unique_id "apctOzQYUm0S3Gh9Jn8yKQAAAY0"]
[Tue Sep 01 14:53:31.989884 2026] [:error] [pid 11529:tid 140353206146816] [client 52.139.44.162:35658] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/run.php"] [unique_id "apctOy580fjDz1VV6yfHIgAAAdU"]
[Tue Sep 01 14:53:32.230240 2026] [:error] [pid 6411:tid 140353248110336] [client 52.139.44.162:35702] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/new.php"] [unique_id "apctPK-5XxGfLhlq8xkGLAAAANA"]
[Tue Sep 01 14:53:32.440967 2026] [:error] [pid 6090:tid 140353239717632] [client 52.139.44.162:35663] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/vpn.php"] [unique_id "apctPLPf1VxWhFqgvWssrAAAAFE"]
[Tue Sep 01 14:53:32.644368 2026] [:error] [pid 6090:tid 140353197754112] [client 52.139.44.162:34951] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/goods.php"] [unique_id "apctPLPf1VxWhFqgvWssrQAAAFY"]
[Tue Sep 01 14:53:32.848140 2026] [:error] [pid 28500:tid 140353281681152] [client 52.139.44.162:35706] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/alfa.php"] [unique_id "apctPDQYUm0S3Gh9Jn8yKgAAAYw"]
[Tue Sep 01 14:53:33.059945 2026] [:error] [pid 28194:tid 140353248110336] [client 52.139.44.162:34965] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/133.php"] [unique_id "apctPQdz-EN0cDNAEVJhdQAAAVA"]
[Tue Sep 01 14:53:33.267793 2026] [:error] [pid 28500:tid 140353452353280] [client 52.139.44.162:35654] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sym.php"] [unique_id "apctPTQYUm0S3Gh9Jn8yLAAAAYA"]
[Tue Sep 01 14:53:33.470712 2026] [:error] [pid 6411:tid 140353214539520] [client 52.139.44.162:35699] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/8.php"] [unique_id "apctPa-5XxGfLhlq8xkGLgAAANQ"]
[Tue Sep 01 14:53:33.678831 2026] [:error] [pid 6091:tid 140353206146816] [client 52.139.44.162:35093] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ws55.php"] [unique_id "apctPckVYOXruxV21N472gAAAJU"]
[Tue Sep 01 14:53:33.878901 2026] [:error] [pid 6090:tid 140353452353280] [client 52.139.44.162:35698] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/indo.php"] [unique_id "apctPbPf1VxWhFqgvWssrwAAAEA"]
[Tue Sep 01 14:53:34.081526 2026] [:error] [pid 29615:tid 140353452353280] [client 52.139.44.162:35667] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wnnjpsby.php"] [unique_id "apctPp1PBa8fnDJM-t7ooQAAAgA"]
[Tue Sep 01 14:53:34.286610 2026] [:error] [pid 11529:tid 140353197754112] [client 52.139.44.162:35084] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/info.php/new.php"] [unique_id "apctPi580fjDz1VV6yfHIwAAAdY"]
[Tue Sep 01 14:53:34.489623 2026] [:error] [pid 29615:tid 140353206146816] [client 52.139.44.162:35174] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/uploads/"] [unique_id "apctPp1PBa8fnDJM-t7oogAAAhU"]
[Tue Sep 01 14:53:34.693998 2026] [:error] [pid 6090:tid 140353357215488] [client 52.139.44.162:35112] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/w.php"] [unique_id "apctPrPf1VxWhFqgvWsssAAAAEM"]
[Tue Sep 01 14:53:34.897484 2026] [:error] [pid 11529:tid 140353323644672] [client 52.139.44.162:35170] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/dk.php"] [unique_id "apctPi580fjDz1VV6yfHJgAAAcc"]
[Tue Sep 01 14:53:35.099352 2026] [:error] [pid 6090:tid 140353306859264] [client 52.139.44.162:34969] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/xc.php"] [unique_id "apctP7Pf1VxWhFqgvWsssgAAAEk"]
[Tue Sep 01 14:53:35.297592 2026] [:error] [pid 11529:tid 140353256503040] [client 52.139.44.162:35179] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/dev.php"] [unique_id "apctPy580fjDz1VV6yfHJwAAAc8"]
[Tue Sep 01 14:53:35.502445 2026] [:error] [pid 11529:tid 140353452353280] [client 52.139.44.162:35156] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp_blog_footer.php"] [unique_id "apctPy580fjDz1VV6yfHKQAAAcA"]
[Tue Sep 01 14:53:35.719260 2026] [:error] [pid 6411:tid 140353452353280] [client 52.139.44.162:34968] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wefile.php"] [unique_id "apctP6-5XxGfLhlq8xkGNQAAAMA"]
[Tue Sep 01 14:53:35.920261 2026] [:error] [pid 28500:tid 140353231324928] [client 52.139.44.162:35679] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-load.php"] [unique_id "apctPzQYUm0S3Gh9Jn8yLQAAAZI"]
[Tue Sep 01 14:53:36.120333 2026] [:error] [pid 6411:tid 140353264895744] [client 52.139.44.162:34998] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/robot.php"] [unique_id "apctQK-5XxGfLhlq8xkGNwAAAM4"]
[Tue Sep 01 14:53:36.320382 2026] [:error] [pid 6411:tid 140353435567872] [client 52.139.44.162:34966] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sss.php"] [unique_id "apctQK-5XxGfLhlq8xkGOAAAAMI"]
[Tue Sep 01 14:53:36.524185 2026] [:error] [pid 6411:tid 140353315251968] [client 52.139.44.162:35151] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/xmini4.php"] [unique_id "apctQK-5XxGfLhlq8xkGOQAAAMg"]
[Tue Sep 01 14:53:36.725105 2026] [:error] [pid 6411:tid 140353206146816] [client 52.139.44.162:35660] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gulu.php"] [unique_id "apctQK-5XxGfLhlq8xkGOgAAANU"]
[Tue Sep 01 14:53:36.928338 2026] [:error] [pid 6090:tid 140353214539520] [client 52.139.44.162:35191] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/replace.php"] [unique_id "apctQLPf1VxWhFqgvWssswAAAFQ"]
[Tue Sep 01 14:53:37.130253 2026] [:error] [pid 6411:tid 140353281681152] [client 52.139.44.162:35004] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/c4.php"] [unique_id "apctQa-5XxGfLhlq8xkGOwAAAMw"]
[Tue Sep 01 14:53:37.331239 2026] [:error] [pid 6411:tid 140353332037376] [client 52.139.44.162:35674] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/rxr.php"] [unique_id "apctQa-5XxGfLhlq8xkGPAAAAMY"]
[Tue Sep 01 14:53:37.531575 2026] [:error] [pid 9194:tid 140353222932224] [client 52.139.44.162:35703] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/reviall.php"] [unique_id "apctQYdqWCmIAB5WEG-YeAAAARM"]
[Tue Sep 01 14:53:37.734743 2026] [:error] [pid 6090:tid 140353180968704] [client 52.139.44.162:35175] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/os.php"] [unique_id "apctQbPf1VxWhFqgvWsstgAAAFg"]
[Tue Sep 01 14:53:37.938373 2026] [:error] [pid 6090:tid 140353435567872] [client 52.139.44.162:35164] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/44.php"] [unique_id "apctQbPf1VxWhFqgvWsstwAAAEI"]
[Tue Sep 01 14:53:38.140279 2026] [:error] [pid 6091:tid 140353180968704] [client 52.139.44.162:35128] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ant.php"] [unique_id "apctQskVYOXruxV21N473AAAAJg"]
[Tue Sep 01 14:53:38.357491 2026] [:error] [pid 11529:tid 140353348822784] [client 52.139.44.162:35461] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/mari.php"] [unique_id "apctQi580fjDz1VV6yfHLQAAAcQ"]
[Tue Sep 01 14:53:38.562011 2026] [:error] [pid 6090:tid 140353281681152] [client 52.139.44.162:34989] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/bp.php"] [unique_id "apctQrPf1VxWhFqgvWssuAAAAEw"]
[Tue Sep 01 14:53:38.762194 2026] [:error] [pid 6090:tid 140353348822784] [client 52.139.44.162:35705] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file61.php"] [unique_id "apctQrPf1VxWhFqgvWssuQAAAEQ"]
[Tue Sep 01 14:53:38.963418 2026] [:error] [pid 28194:tid 140353332037376] [client 52.139.44.162:34960] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file59.php"] [unique_id "apctQgdz-EN0cDNAEVJhdwAAAUY"]
[Tue Sep 01 15:00:13.698264 2026] [proxy_fcgi:error] [pid 9194:tid 140353452353280] [client 62.60.130.142:56512] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:00:13.808031 2026] [proxy_fcgi:error] [pid 28194:tid 140353357215488] [client 62.60.130.142:59020] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:04:27.188106 2026] [:error] [pid 6089:tid 140353435567872] [client 195.178.110.137:62218] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env"] [unique_id "apcvy5jeM2TaVrIYSc9Z1wAAAAI"]
[Tue Sep 01 15:04:27.245477 2026] [:error] [pid 6090:tid 140353332037376] [client 195.178.110.137:43284] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env"] [unique_id "apcvy7Pf1VxWhFqgvWsvJAAAAEY"]
[Tue Sep 01 15:04:27.810881 2026] [:error] [pid 6089:tid 140353256503040] [client 195.178.110.137:62232] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.local"] [unique_id "apcvy5jeM2TaVrIYSc9Z3QAAAA8"]
[Tue Sep 01 15:04:27.850600 2026] [:error] [pid 28194:tid 140353332037376] [client 195.178.110.137:43300] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.local"] [unique_id "apcvywdz-EN0cDNAEVJjhAAAAUY"]
[Tue Sep 01 15:04:28.069177 2026] [:error] [pid 6090:tid 140353306859264] [client 195.178.110.137:62236] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.production"] [unique_id "apcvzLPf1VxWhFqgvWsvJgAAAEk"]
[Tue Sep 01 15:04:28.646089 2026] [:error] [pid 9194:tid 140353332037376] [client 195.178.110.137:62240] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dev"] [unique_id "apcvzIdqWCmIAB5WEG-Z9gAAAQY"]
[Tue Sep 01 15:04:28.667265 2026] [:error] [pid 9194:tid 140353315251968] [client 195.178.110.137:62242] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.bak"] [unique_id "apcvzIdqWCmIAB5WEG-Z9wAAAQg"]
[Tue Sep 01 15:04:28.679548 2026] [:error] [pid 6411:tid 140353197754112] [client 195.178.110.137:43302] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.production"] [unique_id "apcvzK-5XxGfLhlq8xkLYwAAANY"]
[Tue Sep 01 15:04:29.250919 2026] [:error] [pid 6090:tid 140353256503040] [client 195.178.110.137:62252] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.old"] [unique_id "apcvzbPf1VxWhFqgvWsvJwAAAE8"]
[Tue Sep 01 15:04:29.277441 2026] [:error] [pid 11529:tid 140353306859264] [client 195.178.110.137:43308] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dev"] [unique_id "apcvzS580fjDz1VV6yfJpwAAAck"]
[Tue Sep 01 15:04:29.853375 2026] [:error] [pid 6411:tid 140353189361408] [client 195.178.110.137:62262] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.save"] [unique_id "apcvza-5XxGfLhlq8xkLZAAAANc"]
[Tue Sep 01 15:04:29.887556 2026] [:error] [pid 28194:tid 140353357215488] [client 195.178.110.137:43322] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.bak"] [unique_id "apcvzQdz-EN0cDNAEVJjhQAAAUM"]
[Tue Sep 01 15:04:30.110695 2026] [:error] [pid 11529:tid 140353256503040] [client 195.178.110.137:62268] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup"] [unique_id "apcvzi580fjDz1VV6yfJqgAAAc8"]
[Tue Sep 01 15:04:30.441096 2026] [:error] [pid 28194:tid 140353189361408] [client 195.178.110.137:43338] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.old"] [unique_id "apcvzgdz-EN0cDNAEVJjhgAAAVc"]
[Tue Sep 01 15:04:31.067079 2026] [:error] [pid 6091:tid 140353189361408] [client 195.178.110.137:43354] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.save"] [unique_id "apcvz8kVYOXruxV21N49NwAAAJc"]
[Tue Sep 01 15:04:31.383227 2026] [:error] [pid 6091:tid 140353281681152] [client 195.178.110.137:43362] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup"] [unique_id "apcvz8kVYOXruxV21N49OAAAAIw"]
[Tue Sep 01 15:29:18.974231 2026] [autoindex:error] [pid 9194:tid 140353315251968] [client 141.98.11.42:53905] AH01276: Cannot serve directory /home/pesema/public_html/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Sep 01 16:19:11.344856 2026] [:error] [pid 6411:tid 140353298466560] [client 43.134.94.96:49146] [client 43.134.94.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apdBT6-5XxGfLhlq8xkshAAAAMo"]
[Tue Sep 01 16:34:59.968220 2026] [:error] [pid 28500:tid 140353332037376] [client 158.23.184.117:1716] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apdFAzQYUm0S3Gh9Jn9JCQAAAYY"]
[Tue Sep 01 17:14:23.174464 2026] [proxy_fcgi:error] [pid 9194:tid 140353315251968] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:23.278690 2026] [proxy_fcgi:error] [pid 9194:tid 140353357215488] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:23.389434 2026] [proxy_fcgi:error] [pid 9194:tid 140353264895744] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:23.493215 2026] [proxy_fcgi:error] [pid 9194:tid 140353298466560] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:23.609621 2026] [proxy_fcgi:error] [pid 9194:tid 140353452353280] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:23.713528 2026] [proxy_fcgi:error] [pid 9194:tid 140353273288448] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:23.817222 2026] [proxy_fcgi:error] [pid 9194:tid 140353231324928] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:23.923520 2026] [proxy_fcgi:error] [pid 9194:tid 140353443960576] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:24.027089 2026] [proxy_fcgi:error] [pid 9194:tid 140353323644672] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:24.132190 2026] [proxy_fcgi:error] [pid 9194:tid 140353340430080] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:24.241141 2026] [proxy_fcgi:error] [pid 9194:tid 140353222932224] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:24.347479 2026] [proxy_fcgi:error] [pid 9194:tid 140353206146816] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:24.460717 2026] [proxy_fcgi:error] [pid 9194:tid 140353281681152] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:24.565191 2026] [proxy_fcgi:error] [pid 9194:tid 140353239717632] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:24.684468 2026] [proxy_fcgi:error] [pid 9194:tid 140353256503040] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:24.788402 2026] [proxy_fcgi:error] [pid 9194:tid 140353332037376] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:24.892823 2026] [proxy_fcgi:error] [pid 9194:tid 140353214539520] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:24.996679 2026] [proxy_fcgi:error] [pid 9194:tid 140353180968704] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:25.115804 2026] [proxy_fcgi:error] [pid 9194:tid 140353248110336] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:25.234077 2026] [proxy_fcgi:error] [pid 9194:tid 140353348822784] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:25.356046 2026] [proxy_fcgi:error] [pid 9194:tid 140353290073856] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:25.465393 2026] [proxy_fcgi:error] [pid 9194:tid 140353197754112] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:25.569429 2026] [proxy_fcgi:error] [pid 9194:tid 140353315251968] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:25.684539 2026] [proxy_fcgi:error] [pid 9194:tid 140353357215488] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:25.788190 2026] [proxy_fcgi:error] [pid 9194:tid 140353264895744] [client 20.48.250.41:60772] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 17:14:25.788320 2026] [:error] [pid 9194:tid 140353264895744] [client 20.48.250.41:60772] [client 20.48.250.41] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/000.php"] [unique_id "apdOQYdqWCmIAB5WEG-sVwAAAQ4"]
[Tue Sep 01 17:14:25.890346 2026] [:error] [pid 9194:tid 140353452353280] [client 20.48.250.41:60772] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/29.php"] [unique_id "apdOQYdqWCmIAB5WEG-sWQAAAQA"]
[Tue Sep 01 17:14:26.116232 2026] [:error] [pid 11529:tid 140353290073856] [client 20.48.250.41:60684] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/faiy.php"] [unique_id "apdOQi580fjDz1VV6yfv6AAAAcs"]
[Tue Sep 01 17:14:26.328412 2026] [:error] [pid 6411:tid 140353231324928] [client 20.48.250.41:62552] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ho.php"] [unique_id "apdOQq-5XxGfLhlq8xlDqAAAANI"]
[Tue Sep 01 17:14:26.554728 2026] [:error] [pid 6411:tid 140353323644672] [client 20.48.250.41:62544] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/e219b53abbindex.php"] [unique_id "apdOQq-5XxGfLhlq8xlDqwAAAMc"]
[Tue Sep 01 17:14:26.781081 2026] [:error] [pid 6411:tid 140353357215488] [client 20.48.250.41:62498] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/XrdbXydefault.php"] [unique_id "apdOQq-5XxGfLhlq8xlDrQAAAMM"]
[Tue Sep 01 17:14:27.014347 2026] [:error] [pid 6411:tid 140353443960576] [client 20.48.250.41:62484] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/82.php"] [unique_id "apdOQ6-5XxGfLhlq8xlDrwAAAME"]
[Tue Sep 01 17:14:27.243384 2026] [:error] [pid 28500:tid 140353214539520] [client 20.48.250.41:60737] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/20.php"] [unique_id "apdOQzQYUm0S3Gh9Jn9TIgAAAZQ"]
[Tue Sep 01 17:14:27.442982 2026] [:error] [pid 11529:tid 140353239717632] [client 20.48.250.41:60679] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a65.php"] [unique_id "apdOQy580fjDz1VV6yfv6gAAAdE"]
[Tue Sep 01 17:14:27.678668 2026] [:error] [pid 11529:tid 140353357215488] [client 20.48.250.41:60789] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ilex.php"] [unique_id "apdOQy580fjDz1VV6yfv6wAAAcM"]
[Tue Sep 01 17:14:27.893398 2026] [:error] [pid 6411:tid 140353206146816] [client 20.48.250.41:60748] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pqfpcelx.php"] [unique_id "apdOQ6-5XxGfLhlq8xlDsgAAANU"]
[Tue Sep 01 17:14:28.122802 2026] [:error] [pid 29615:tid 140353435567872] [client 20.48.250.41:60757] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/f35.update.php"] [unique_id "apdORJ1PBa8fnDJM-t77QgAAAgI"]
[Tue Sep 01 17:14:28.327159 2026] [:error] [pid 6090:tid 140353222932224] [client 20.48.250.41:60761] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zoo1.php"] [unique_id "apdORLPf1VxWhFqgvWtEYAAAAFM"]
[Tue Sep 01 17:14:28.563707 2026] [:error] [pid 6411:tid 140353231324928] [client 20.48.250.41:60784] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ot.php"] [unique_id "apdORK-5XxGfLhlq8xlDtwAAANI"]
[Tue Sep 01 17:14:28.768272 2026] [:error] [pid 28500:tid 140353197754112] [client 20.48.250.41:60757] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/edorxrr.php"] [unique_id "apdORDQYUm0S3Gh9Jn9TIwAAAZY"]
[Tue Sep 01 17:14:28.988262 2026] [:error] [pid 28500:tid 140353180968704] [client 20.48.250.41:62491] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zoo2.php"] [unique_id "apdORDQYUm0S3Gh9Jn9TJAAAAZg"]
[Tue Sep 01 17:14:29.239588 2026] [:error] [pid 28500:tid 140353357215488] [client 20.48.250.41:60743] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hywzd.php"] [unique_id "apdORTQYUm0S3Gh9Jn9TJQAAAYM"]
[Tue Sep 01 17:14:36.390305 2026] [:error] [pid 9194:tid 140353323644672] [client 20.48.250.41:60759] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/simple.php"] [unique_id "apdOTIdqWCmIAB5WEG-sWgAAAQc"]
[Tue Sep 01 17:14:36.617536 2026] [:error] [pid 6090:tid 140353306859264] [client 20.48.250.41:62536] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/acf1ced8aec2.php"] [unique_id "apdOTLPf1VxWhFqgvWtEYgAAAEk"]
[Tue Sep 01 17:14:36.830407 2026] [:error] [pid 6411:tid 140353214539520] [client 20.48.250.41:60702] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/coffe.php"] [unique_id "apdOTK-5XxGfLhlq8xlDywAAANQ"]
[Tue Sep 01 17:14:37.033386 2026] [:error] [pid 28194:tid 140353197754112] [client 20.48.250.41:62583] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/asax.php"] [unique_id "apdOTQdz-EN0cDNAEVJzWAAAAVY"]
[Tue Sep 01 17:14:37.256904 2026] [:error] [pid 6090:tid 140353281681152] [client 20.48.250.41:60689] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cjhnp.php"] [unique_id "apdOTbPf1VxWhFqgvWtEYwAAAEw"]
[Tue Sep 01 17:14:37.479698 2026] [:error] [pid 6411:tid 140353256503040] [client 20.48.250.41:62553] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jlex.php"] [unique_id "apdOTa-5XxGfLhlq8xlDzgAAAM8"]
[Tue Sep 01 17:14:37.677987 2026] [:error] [pid 6411:tid 140353197754112] [client 20.48.250.41:60766] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kerang.php"] [unique_id "apdOTa-5XxGfLhlq8xlDzwAAANY"]
[Tue Sep 01 17:14:37.891424 2026] [:error] [pid 29615:tid 140353248110336] [client 20.48.250.41:62496] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/local.php"] [unique_id "apdOTZ1PBa8fnDJM-t77RgAAAhA"]
[Tue Sep 01 17:14:38.103874 2026] [:error] [pid 11529:tid 140353290073856] [client 20.48.250.41:60763] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kbqhb.php"] [unique_id "apdOTi580fjDz1VV6yfv8wAAAcs"]
[Tue Sep 01 17:26:19.076983 2026] [:error] [pid 9194:tid 140353281681152] [client 146.56.197.150:54250] [client 146.56.197.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apdRC4dqWCmIAB5WEG-tagAAAQw"]
[Tue Sep 01 17:27:37.297040 2026] [:error] [pid 6411:tid 140353180968704] [client 101.32.52.164:55678] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apdRWa-5XxGfLhlq8xlIHQAAANg"]
[Tue Sep 01 18:20:00.947794 2026] [proxy_fcgi:error] [pid 28500:tid 140353214539520] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:01.061774 2026] [proxy_fcgi:error] [pid 28500:tid 140353323644672] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:01.178540 2026] [proxy_fcgi:error] [pid 28500:tid 140353290073856] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:01.289320 2026] [proxy_fcgi:error] [pid 28500:tid 140353332037376] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:01.393420 2026] [proxy_fcgi:error] [pid 28500:tid 140353357215488] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:01.497424 2026] [proxy_fcgi:error] [pid 28500:tid 140353281681152] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:10.099415 2026] [proxy_fcgi:error] [pid 28500:tid 140353273288448] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:10.204797 2026] [proxy_fcgi:error] [pid 28500:tid 140353239717632] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:10.312464 2026] [proxy_fcgi:error] [pid 28500:tid 140353248110336] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:10.444949 2026] [proxy_fcgi:error] [pid 28500:tid 140353452353280] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:10.555813 2026] [proxy_fcgi:error] [pid 28500:tid 140353435567872] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:10.661691 2026] [proxy_fcgi:error] [pid 28500:tid 140353348822784] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:10.766783 2026] [proxy_fcgi:error] [pid 28500:tid 140353189361408] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:10.872660 2026] [proxy_fcgi:error] [pid 28500:tid 140353206146816] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:10.979405 2026] [proxy_fcgi:error] [pid 28500:tid 140353231324928] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:11.083977 2026] [proxy_fcgi:error] [pid 28500:tid 140353298466560] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:11.189896 2026] [proxy_fcgi:error] [pid 28500:tid 140353180968704] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:11.295145 2026] [proxy_fcgi:error] [pid 28500:tid 140353306859264] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:11.400778 2026] [proxy_fcgi:error] [pid 28500:tid 140353256503040] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:11.537162 2026] [proxy_fcgi:error] [pid 28500:tid 140353214539520] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:11.643181 2026] [proxy_fcgi:error] [pid 28500:tid 140353323644672] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:11.775443 2026] [proxy_fcgi:error] [pid 28500:tid 140353290073856] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:11.882391 2026] [proxy_fcgi:error] [pid 28500:tid 140353332037376] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:11.990376 2026] [proxy_fcgi:error] [pid 28500:tid 140353357215488] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:12.096277 2026] [proxy_fcgi:error] [pid 28500:tid 140353197754112] [client 20.220.204.93:11824] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:20:12.096461 2026] [:error] [pid 28500:tid 140353197754112] [client 20.220.204.93:11824] [client 20.220.204.93] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/000.php"] [unique_id "apddrDQYUm0S3Gh9Jn9fugAAAZY"]
[Tue Sep 01 18:20:12.215046 2026] [:error] [pid 28500:tid 140353264895744] [client 20.220.204.93:11824] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/29.php"] [unique_id "apddrDQYUm0S3Gh9Jn9fuwAAAY4"]
[Tue Sep 01 18:20:12.465355 2026] [:error] [pid 6411:tid 140353239717632] [client 20.220.204.93:34969] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/faiy.php"] [unique_id "apddrK-5XxGfLhlq8xlaQQAAANE"]
[Tue Sep 01 18:20:12.670612 2026] [:error] [pid 6091:tid 140353340430080] [client 20.220.204.93:35684] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ho.php"] [unique_id "apddrMkVYOXruxV21N5ShwAAAIU"]
[Tue Sep 01 18:20:12.882544 2026] [:error] [pid 6089:tid 140353340430080] [client 20.220.204.93:11834] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/e219b53abbindex.php"] [unique_id "apddrJjeM2TaVrIYSc9uMgAAAAU"]
[Tue Sep 01 18:20:13.100806 2026] [:error] [pid 6091:tid 140353180968704] [client 20.220.204.93:25908] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/XrdbXydefault.php"] [unique_id "apddrckVYOXruxV21N5SiAAAAJg"]
[Tue Sep 01 18:20:13.295387 2026] [:error] [pid 6091:tid 140353315251968] [client 20.220.204.93:11809] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/82.php"] [unique_id "apddrckVYOXruxV21N5SiQAAAIg"]
[Tue Sep 01 18:20:13.500913 2026] [:error] [pid 29615:tid 140353315251968] [client 20.220.204.93:35000] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/20.php"] [unique_id "apddrZ1PBa8fnDJM-t4EewAAAgg"]
[Tue Sep 01 18:20:13.724515 2026] [:error] [pid 6091:tid 140353264895744] [client 20.220.204.93:11963] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a65.php"] [unique_id "apddrckVYOXruxV21N5SigAAAI4"]
[Tue Sep 01 18:20:13.927262 2026] [:error] [pid 6411:tid 140353315251968] [client 20.220.204.93:11931] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ilex.php"] [unique_id "apddra-5XxGfLhlq8xlaQwAAAMg"]
[Tue Sep 01 18:20:14.148808 2026] [:error] [pid 29615:tid 140353222932224] [client 20.220.204.93:36191] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pqfpcelx.php"] [unique_id "apddrp1PBa8fnDJM-t4EfAAAAhM"]
[Tue Sep 01 18:20:14.352997 2026] [:error] [pid 28194:tid 140353281681152] [client 20.220.204.93:11811] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/f35.update.php"] [unique_id "apddrgdz-EN0cDNAEVJ5XgAAAUw"]
[Tue Sep 01 18:20:14.552919 2026] [:error] [pid 6091:tid 140353214539520] [client 20.220.204.93:36204] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zoo1.php"] [unique_id "apddrskVYOXruxV21N5SiwAAAJQ"]
[Tue Sep 01 18:20:14.754205 2026] [:error] [pid 28194:tid 140353197754112] [client 20.220.204.93:34986] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ot.php"] [unique_id "apddrgdz-EN0cDNAEVJ5XwAAAVY"]
[Tue Sep 01 18:20:14.957937 2026] [:error] [pid 6089:tid 140353315251968] [client 20.220.204.93:35651] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/edorxrr.php"] [unique_id "apddrpjeM2TaVrIYSc9uMwAAAAg"]
[Tue Sep 01 18:20:15.167511 2026] [:error] [pid 6089:tid 140353281681152] [client 20.220.204.93:11828] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zoo2.php"] [unique_id "apddr5jeM2TaVrIYSc9uNAAAAAw"]
[Tue Sep 01 18:20:15.387128 2026] [:error] [pid 6411:tid 140353435567872] [client 20.220.204.93:36177] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hywzd.php"] [unique_id "apddr6-5XxGfLhlq8xlaRAAAAMI"]
[Tue Sep 01 18:20:15.600353 2026] [:error] [pid 29615:tid 140353435567872] [client 20.220.204.93:24599] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/simple.php"] [unique_id "apddr51PBa8fnDJM-t4EfQAAAgI"]
[Tue Sep 01 18:20:15.839344 2026] [:error] [pid 6091:tid 140353290073856] [client 20.220.204.93:25859] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/acf1ced8aec2.php"] [unique_id "apddr8kVYOXruxV21N5SjQAAAIs"]
[Tue Sep 01 18:20:16.043193 2026] [:error] [pid 6411:tid 140353222932224] [client 20.220.204.93:36216] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/coffe.php"] [unique_id "apddsK-5XxGfLhlq8xlaRQAAANM"]
[Tue Sep 01 18:20:16.269767 2026] [:error] [pid 11529:tid 140353239717632] [client 20.220.204.93:36188] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/asax.php"] [unique_id "apddsC580fjDz1VV6yf_gQAAAdE"]
[Tue Sep 01 18:20:16.484964 2026] [:error] [pid 29615:tid 140353248110336] [client 20.220.204.93:34948] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cjhnp.php"] [unique_id "apddsJ1PBa8fnDJM-t4EfwAAAhA"]
[Tue Sep 01 18:20:16.709467 2026] [:error] [pid 29615:tid 140353206146816] [client 20.220.204.93:11922] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jlex.php"] [unique_id "apddsJ1PBa8fnDJM-t4EgAAAAhU"]
[Tue Sep 01 18:20:16.930578 2026] [:error] [pid 6089:tid 140353189361408] [client 20.220.204.93:36162] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kerang.php"] [unique_id "apddsJjeM2TaVrIYSc9uNgAAABc"]
[Tue Sep 01 18:20:17.246606 2026] [:error] [pid 6091:tid 140353281681152] [client 20.220.204.93:11814] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/local.php"] [unique_id "apddsckVYOXruxV21N5SkAAAAIw"]
[Tue Sep 01 18:20:17.501378 2026] [:error] [pid 6090:tid 140353348822784] [client 20.220.204.93:24638] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kbqhb.php"] [unique_id "apddsbPf1VxWhFqgvWtP8AAAAEQ"]
[Tue Sep 01 18:39:55.671193 2026] [proxy_fcgi:error] [pid 11529:tid 140353231324928] [client 67.205.170.93:33972] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 19:19:49.613561 2026] [proxy_fcgi:error] [pid 9194:tid 140353435567872] [client 198.235.24.203:60352] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 19:20:53.309426 2026] [proxy_fcgi:error] [pid 6089:tid 140353290073856] [client 147.185.132.31:58168] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 19:22:58.814004 2026] [proxy_fcgi:error] [pid 11529:tid 140353323644672] [client 195.201.40.19:49930] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 19:29:27.347488 2026] [authz_core:error] [pid 6411:tid 140353281681152] [client 153.67.87.222:43781] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Tue Sep 01 20:48:05.349027 2026] [proxy_fcgi:error] [pid 28194:tid 140353290073856] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:05.459976 2026] [proxy_fcgi:error] [pid 28194:tid 140353180968704] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:05.596657 2026] [proxy_fcgi:error] [pid 28194:tid 140353214539520] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:06.012031 2026] [proxy_fcgi:error] [pid 28194:tid 140353452353280] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:06.119069 2026] [proxy_fcgi:error] [pid 28194:tid 140353348822784] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:06.226471 2026] [proxy_fcgi:error] [pid 28194:tid 140353273288448] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:06.334306 2026] [proxy_fcgi:error] [pid 28194:tid 140353443960576] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:06.441820 2026] [proxy_fcgi:error] [pid 28194:tid 140353332037376] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:06.551173 2026] [proxy_fcgi:error] [pid 28194:tid 140353264895744] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:06.673147 2026] [proxy_fcgi:error] [pid 28194:tid 140353206146816] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:06.794337 2026] [proxy_fcgi:error] [pid 28194:tid 140353357215488] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:06.917415 2026] [proxy_fcgi:error] [pid 28194:tid 140353323644672] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:07.024654 2026] [proxy_fcgi:error] [pid 28194:tid 140353315251968] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:07.134772 2026] [proxy_fcgi:error] [pid 28194:tid 140353239717632] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:07.243309 2026] [proxy_fcgi:error] [pid 28194:tid 140353248110336] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:07.349479 2026] [proxy_fcgi:error] [pid 28194:tid 140353256503040] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:07.502361 2026] [proxy_fcgi:error] [pid 28194:tid 140353306859264] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:07.923466 2026] [proxy_fcgi:error] [pid 28194:tid 140353435567872] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:08.038263 2026] [proxy_fcgi:error] [pid 28194:tid 140353340430080] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:08.250505 2026] [proxy_fcgi:error] [pid 28194:tid 140353452353280] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:08.356326 2026] [proxy_fcgi:error] [pid 28194:tid 140353348822784] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:08.466852 2026] [proxy_fcgi:error] [pid 28194:tid 140353273288448] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:08.687448 2026] [proxy_fcgi:error] [pid 28194:tid 140353332037376] [client 4.205.62.107:30528] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:48:08.687673 2026] [:error] [pid 28194:tid 140353332037376] [client 4.205.62.107:30528] [client 4.205.62.107] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.pesema.com"] [uri "/06.php"] [unique_id "apeAWAdz-EN0cDNAEVKTgQAAAUY"]
[Tue Sep 01 20:48:08.836125 2026] [:error] [pid 28194:tid 140353264895744] [client 4.205.62.107:30528] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/aws_config.php"] [unique_id "apeAWAdz-EN0cDNAEVKTggAAAU4"]
[Tue Sep 01 20:48:10.049966 2026] [:error] [pid 11529:tid 140353273288448] [client 4.205.62.107:31269] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phina.php"] [unique_id "apeAWi580fjDz1VV6yccDQAAAc0"]
[Tue Sep 01 20:48:11.271471 2026] [:error] [pid 6411:tid 140353340430080] [client 4.205.62.107:31276] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/66.php"] [unique_id "apeAW6-5XxGfLhlq8xmAqgAAAMU"]
[Tue Sep 01 20:48:12.483114 2026] [:error] [pid 6090:tid 140353256503040] [client 4.205.62.107:30538] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/localconf.php"] [unique_id "apeAXLPf1VxWhFqgvWthhgAAAE8"]
[Tue Sep 01 20:48:13.698754 2026] [:error] [pid 28194:tid 140353256503040] [client 4.205.62.107:31266] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cli_bootstrap.php"] [unique_id "apeAXQdz-EN0cDNAEVKThgAAAU8"]
[Tue Sep 01 20:48:14.920154 2026] [:error] [pid 11529:tid 140353264895744] [client 4.205.62.107:31237] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/dialog.php"] [unique_id "apeAXi580fjDz1VV6yccDwAAAc4"]
[Tue Sep 01 20:48:16.174059 2026] [:error] [pid 11529:tid 140353189361408] [client 4.205.62.107:30566] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apeAYC580fjDz1VV6yccEAAAAdc"]
[Tue Sep 01 20:48:17.384857 2026] [:error] [pid 29730:tid 140353332037376] [client 4.205.62.107:30569] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/error_log.php"] [unique_id "apeAYUKKsXadAWpiFbsudAAAAkY"]
[Tue Sep 01 20:48:18.605499 2026] [:error] [pid 6089:tid 140353239717632] [client 4.205.62.107:31279] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/bengi.php"] [unique_id "apeAYpjeM2TaVrIYSc-I2gAAABE"]
[Tue Sep 01 20:48:21.866469 2026] [:error] [pid 6089:tid 140353180968704] [client 4.205.62.107:30410] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/a1vx.php"] [unique_id "apeAZZjeM2TaVrIYSc-I3gAAABg"]
[Tue Sep 01 20:48:23.083327 2026] [:error] [pid 29730:tid 140353264895744] [client 4.205.62.107:31250] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/konfig.php"] [unique_id "apeAZ0KKsXadAWpiFbsudwAAAk4"]
[Tue Sep 01 20:48:24.293254 2026] [:error] [pid 6089:tid 140353298466560] [client 4.205.62.107:30557] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/xqq.php"] [unique_id "apeAaJjeM2TaVrIYSc-I3wAAAAo"]
[Tue Sep 01 20:48:25.542611 2026] [:error] [pid 29730:tid 140353290073856] [client 4.205.62.107:30534] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/aws-credentials.php"] [unique_id "apeAaUKKsXadAWpiFbsueAAAAks"]
[Tue Sep 01 20:48:26.776961 2026] [:error] [pid 29615:tid 140353298466560] [client 4.205.62.107:30556] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wpver.php"] [unique_id "apeAap1PBa8fnDJM-t4WnAAAAgo"]
[Tue Sep 01 20:48:27.990402 2026] [:error] [pid 28194:tid 140353290073856] [client 4.205.62.107:30559] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/admin.php"] [unique_id "apeAawdz-EN0cDNAEVKTiAAAAUs"]
[Tue Sep 01 20:48:29.225475 2026] [:error] [pid 6089:tid 140353214539520] [client 4.205.62.107:30565] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/paths.php"] [unique_id "apeAbZjeM2TaVrIYSc-I4gAAABQ"]
[Tue Sep 01 20:48:34.511976 2026] [:error] [pid 6411:tid 140353452353280] [client 4.205.62.107:31274] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-konfig.backup.php"] [unique_id "apeAcq-5XxGfLhlq8xmArwAAAMA"]
[Tue Sep 01 20:48:35.723068 2026] [:error] [pid 6090:tid 140353180968704] [client 4.205.62.107:31045] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/motu.php"] [unique_id "apeAc7Pf1VxWhFqgvWthiAAAAFg"]
[Tue Sep 01 20:48:36.939127 2026] [:error] [pid 6089:tid 140353357215488] [client 4.205.62.107:31091] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/var/www/wallet/index.php"] [unique_id "apeAdJjeM2TaVrIYSc-I5gAAAAM"]
[Tue Sep 01 20:48:38.141223 2026] [:error] [pid 28194:tid 140353357215488] [client 4.205.62.107:31248] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/xza.php"] [unique_id "apeAdgdz-EN0cDNAEVKTjAAAAUM"]
[Tue Sep 01 20:48:39.384555 2026] [:error] [pid 6090:tid 140353452353280] [client 4.205.62.107:30574] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/doc.php"] [unique_id "apeAd7Pf1VxWhFqgvWthigAAAEA"]
[Tue Sep 01 20:48:40.591572 2026] [:error] [pid 28194:tid 140353298466560] [client 4.205.62.107:30584] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cu.php"] [unique_id "apeAeAdz-EN0cDNAEVKTkAAAAUo"]
[Tue Sep 01 20:48:41.807373 2026] [:error] [pid 9194:tid 140353264895744] [client 4.205.62.107:31241] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/groceries/index.php"] [unique_id "apeAeYdqWCmIAB5WEG_E6gAAAQ4"]
[Tue Sep 01 20:48:43.025108 2026] [:error] [pid 29730:tid 140353323644672] [client 4.205.62.107:30579] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-config.backup.php"] [unique_id "apeAe0KKsXadAWpiFbsugQAAAkc"]
[Tue Sep 01 20:48:44.241693 2026] [:error] [pid 11529:tid 140353435567872] [client 4.205.62.107:31071] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/app.default.php"] [unique_id "apeAfC580fjDz1VV6yccHgAAAcI"]
[Tue Sep 01 20:48:45.460418 2026] [:error] [pid 28194:tid 140353189361408] [client 4.205.62.107:30583] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/database.php"] [unique_id "apeAfQdz-EN0cDNAEVKTkwAAAVc"]
[Tue Sep 01 20:48:46.676492 2026] [:error] [pid 6089:tid 140353452353280] [client 4.205.62.107:30535] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-blog.php"] [unique_id "apeAfpjeM2TaVrIYSc-I7wAAAAA"]
[Tue Sep 01 20:48:47.891879 2026] [:error] [pid 11529:tid 140353290073856] [client 4.205.62.107:31262] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/apikeys.php"] [unique_id "apeAfy580fjDz1VV6yccHwAAAcs"]
[Tue Sep 01 20:48:49.110758 2026] [:error] [pid 6089:tid 140353248110336] [client 4.205.62.107:30580] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-class.php"] [unique_id "apeAgZjeM2TaVrIYSc-I8wAAABA"]
[Tue Sep 01 20:48:50.322190 2026] [:error] [pid 29730:tid 140353340430080] [client 4.205.62.107:30544] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/infos.php"] [unique_id "apeAgkKKsXadAWpiFbsuiAAAAkU"]
[Tue Sep 01 20:48:51.545198 2026] [:error] [pid 11529:tid 140353348822784] [client 4.205.62.107:30563] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/nw.php"] [unique_id "apeAgy580fjDz1VV6yccIgAAAcQ"]
[Tue Sep 01 20:48:52.786933 2026] [:error] [pid 6090:tid 140353180968704] [client 4.205.62.107:31277] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ebahvhhh.php"] [unique_id "apeAhLPf1VxWhFqgvWthlQAAAFg"]
[Tue Sep 01 20:48:53.995757 2026] [:error] [pid 29615:tid 140353273288448] [client 4.205.62.107:31236] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cp2.php"] [unique_id "apeAhZ1PBa8fnDJM-t4WrQAAAg0"]
[Tue Sep 01 20:48:55.214510 2026] [:error] [pid 6089:tid 140353248110336] [client 4.205.62.107:31246] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/agg.php"] [unique_id "apeAh5jeM2TaVrIYSc-JCQAAABA"]
[Tue Sep 01 20:48:56.429547 2026] [:error] [pid 28194:tid 140353281681152] [client 4.205.62.107:31256] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/fucku.php"] [unique_id "apeAiAdz-EN0cDNAEVKTmwAAAUw"]
[Tue Sep 01 20:48:57.630964 2026] [:error] [pid 28194:tid 140353180968704] [client 4.205.62.107:31239] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/dd.php"] [unique_id "apeAiQdz-EN0cDNAEVKToAAAAVg"]
[Tue Sep 01 20:48:58.833781 2026] [:error] [pid 28500:tid 140353443960576] [client 4.205.62.107:31257] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/environment.php"] [unique_id "apeAijQYUm0S3Gh9Jn93ggAAAYE"]
[Tue Sep 01 20:49:00.067826 2026] [:error] [pid 6089:tid 140353332037376] [client 4.205.62.107:31267] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/aws_auth.php"] [unique_id "apeAjJjeM2TaVrIYSc-JFQAAAAY"]
[Tue Sep 01 20:49:01.281210 2026] [:error] [pid 6411:tid 140353290073856] [client 4.205.62.107:30553] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/koiy.php"] [unique_id "apeAja-5XxGfLhlq8xmAvgAAAMs"]
[Tue Sep 01 20:49:02.556457 2026] [:error] [pid 6091:tid 140353248110336] [client 4.205.62.107:31087] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/userfuns.php"] [unique_id "apeAjskVYOXruxV21N5qoQAAAJA"]
[Tue Sep 01 20:49:03.779948 2026] [:error] [pid 28194:tid 140353231324928] [client 4.205.62.107:30548] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/register.php"] [unique_id "apeAjwdz-EN0cDNAEVKToQAAAVI"]
[Tue Sep 01 20:49:05.012188 2026] [:error] [pid 29615:tid 140353435567872] [client 4.205.62.107:30550] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/autogooey.php"] [unique_id "apeAkZ1PBa8fnDJM-t4WtAAAAgI"]
[Tue Sep 01 20:49:06.247291 2026] [:error] [pid 6089:tid 140353180968704] [client 4.205.62.107:31232] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/oc460l3x.php"] [unique_id "apeAkpjeM2TaVrIYSc-JGgAAABg"]
[Tue Sep 01 20:49:07.479910 2026] [:error] [pid 6090:tid 140353206146816] [client 4.205.62.107:31264] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/log.php"] [unique_id "apeAk7Pf1VxWhFqgvWthmwAAAFU"]
[Tue Sep 01 20:49:08.698594 2026] [:error] [pid 29615:tid 140353281681152] [client 4.205.62.107:30558] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-konfig.php"] [unique_id "apeAlJ1PBa8fnDJM-t4WtgAAAgw"]
[Tue Sep 01 20:49:09.921231 2026] [:error] [pid 29615:tid 140353189361408] [client 4.205.62.107:31242] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/hochladen.form.php"] [unique_id "apeAlZ1PBa8fnDJM-t4WuwAAAhc"]
[Tue Sep 01 20:49:11.145953 2026] [:error] [pid 9194:tid 140353298466560] [client 4.205.62.107:30570] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/87.php"] [unique_id "apeAl4dqWCmIAB5WEG_E_AAAAQo"]
[Tue Sep 01 20:49:12.348703 2026] [:error] [pid 28194:tid 140353214539520] [client 4.205.62.107:30402] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-tem.php"] [unique_id "apeAmAdz-EN0cDNAEVKTrAAAAVQ"]
[Tue Sep 01 20:49:13.568207 2026] [:error] [pid 11529:tid 140353435567872] [client 4.205.62.107:30530] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apeAmS580fjDz1VV6yccNAAAAcI"]
[Tue Sep 01 20:49:14.854135 2026] [:error] [pid 29730:tid 140353256503040] [client 4.205.62.107:31270] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/zaza.php"] [unique_id "apeAmkKKsXadAWpiFbsumAAAAk8"]
[Tue Sep 01 20:49:16.061823 2026] [:error] [pid 6411:tid 140353273288448] [client 4.205.62.107:31063] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/php_info.php"] [unique_id "apeAnK-5XxGfLhlq8xmAxgAAAM0"]
[Tue Sep 01 20:49:17.265124 2026] [:error] [pid 6091:tid 140353180968704] [client 4.205.62.107:31284] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/g3.php"] [unique_id "apeAnckVYOXruxV21N5qsgAAAJg"]
[Tue Sep 01 20:49:18.482774 2026] [:error] [pid 6089:tid 140353340430080] [client 4.205.62.107:30547] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/zz.php"] [unique_id "apeAnpjeM2TaVrIYSc-JNwAAAAU"]
[Tue Sep 01 20:49:19.698928 2026] [:error] [pid 28500:tid 140353214539520] [client 4.205.62.107:30576] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/xa.php"] [unique_id "apeAnzQYUm0S3Gh9Jn93iwAAAZQ"]
[Tue Sep 01 20:49:20.916399 2026] [:error] [pid 6089:tid 140353273288448] [client 4.205.62.107:31278] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ms-edit.php"] [unique_id "apeAoJjeM2TaVrIYSc-JOgAAAA0"]
[Tue Sep 01 20:49:22.131786 2026] [:error] [pid 28500:tid 140353180968704] [client 4.205.62.107:31234] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/saml.php"] [unique_id "apeAojQYUm0S3Gh9Jn93jQAAAZg"]
[Tue Sep 01 20:49:23.334705 2026] [:error] [pid 11529:tid 140353189361408] [client 4.205.62.107:31265] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/aws_credentials.php"] [unique_id "apeAoy580fjDz1VV6yccOgAAAdc"]
[Tue Sep 01 20:49:24.559616 2026] [:error] [pid 29730:tid 140353248110336] [client 4.205.62.107:30567] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apeApEKKsXadAWpiFbsumQAAAlA"]
[Tue Sep 01 20:49:25.770046 2026] [:error] [pid 29730:tid 140353214539520] [client 4.205.62.107:31079] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/lmfi2.php"] [unique_id "apeApUKKsXadAWpiFbsumwAAAlQ"]
[Tue Sep 01 20:49:26.986716 2026] [:error] [pid 6090:tid 140353189361408] [client 4.205.62.107:31249] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/snq.php"] [unique_id "apeAprPf1VxWhFqgvWthowAAAFc"]
[Tue Sep 01 20:49:28.202786 2026] [:error] [pid 6411:tid 140353180968704] [client 4.205.62.107:31083] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gjm.php"] [unique_id "apeAqK-5XxGfLhlq8xmAygAAANg"]
[Tue Sep 01 20:49:29.438012 2026] [:error] [pid 11529:tid 140353340430080] [client 4.205.62.107:30540] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/fraro.php"] [unique_id "apeAqS580fjDz1VV6yccPwAAAcU"]
[Tue Sep 01 20:49:30.651331 2026] [:error] [pid 28194:tid 140353222932224] [client 4.205.62.107:31255] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/hiquido.com/index.php"] [unique_id "apeAqgdz-EN0cDNAEVKTugAAAVM"]
[Tue Sep 01 20:49:31.891801 2026] [:error] [pid 9194:tid 140353315251968] [client 4.205.62.107:31235] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/xp.php"] [unique_id "apeAq4dqWCmIAB5WEG_FBwAAAQg"]
[Tue Sep 01 20:49:33.102534 2026] [:error] [pid 6090:tid 140353256503040] [client 4.205.62.107:31042] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/tax.php"] [unique_id "apeArbPf1VxWhFqgvWthpgAAAE8"]
[Tue Sep 01 20:49:34.320452 2026] [:error] [pid 6089:tid 140353323644672] [client 4.205.62.107:30585] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ms-edit.php"] [unique_id "apeArpjeM2TaVrIYSc-JRwAAAAc"]
[Tue Sep 01 20:49:35.538571 2026] [:error] [pid 6091:tid 140353197754112] [client 4.205.62.107:31259] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/fm.php"] [unique_id "apeAr8kVYOXruxV21N5qxwAAAJY"]
[Tue Sep 01 20:49:36.755129 2026] [:error] [pid 6089:tid 140353231324928] [client 4.205.62.107:31053] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ws62.php"] [unique_id "apeAsJjeM2TaVrIYSc-JSwAAABI"]
[Tue Sep 01 20:49:38.000479 2026] [:error] [pid 28194:tid 140353332037376] [client 4.205.62.107:31247] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/fun.php"] [unique_id "apeAsQdz-EN0cDNAEVKTwAAAAUY"]
[Tue Sep 01 20:49:39.205173 2026] [:error] [pid 9194:tid 140353180968704] [client 4.205.62.107:30591] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sdsa.php"] [unique_id "apeAs4dqWCmIAB5WEG_FCgAAARg"]
[Tue Sep 01 20:49:40.421604 2026] [:error] [pid 6089:tid 140353214539520] [client 4.205.62.107:31059] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/05.php"] [unique_id "apeAtJjeM2TaVrIYSc-JUAAAABQ"]
[Tue Sep 01 20:49:41.644398 2026] [:error] [pid 6089:tid 140353239717632] [client 4.205.62.107:31076] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/pouhg.php"] [unique_id "apeAtZjeM2TaVrIYSc-JUgAAABE"]
[Tue Sep 01 20:49:44.863064 2026] [:error] [pid 6091:tid 140353189361408] [client 4.205.62.107:30424] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/txets.php"] [unique_id "apeAuMkVYOXruxV21N5qygAAAJc"]
[Tue Sep 01 20:49:46.080975 2026] [:error] [pid 6091:tid 140353452353280] [client 4.205.62.107:31295] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/333.php"] [unique_id "apeAuskVYOXruxV21N5qzAAAAIA"]
[Tue Sep 01 20:49:47.311617 2026] [:error] [pid 28500:tid 140353189361408] [client 4.205.62.107:30564] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/packed.php"] [unique_id "apeAuzQYUm0S3Gh9Jn93lgAAAZc"]
[Tue Sep 01 20:49:48.517924 2026] [:error] [pid 28194:tid 140353222932224] [client 4.205.62.107:30441] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/mga.php"] [unique_id "apeAvAdz-EN0cDNAEVKTxAAAAVM"]
[Tue Sep 01 20:49:49.739356 2026] [:error] [pid 29730:tid 140353273288448] [client 4.205.62.107:31094] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/api.php"] [unique_id "apeAvUKKsXadAWpiFbsuoAAAAk0"]
[Tue Sep 01 20:49:50.947490 2026] [:error] [pid 6089:tid 140353452353280] [client 4.205.62.107:30541] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/classsmtps.php"] [unique_id "apeAvpjeM2TaVrIYSc-JWgAAAAA"]
[Tue Sep 01 20:49:52.191813 2026] [:error] [pid 6089:tid 140353281681152] [client 4.205.62.107:31084] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/xve22.php"] [unique_id "apeAwJjeM2TaVrIYSc-JXQAAAAw"]
[Tue Sep 01 20:49:53.402363 2026] [:error] [pid 6091:tid 140353281681152] [client 4.205.62.107:30533] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/php-info.php"] [unique_id "apeAwckVYOXruxV21N5q0gAAAIw"]
[Tue Sep 01 20:49:54.632744 2026] [:error] [pid 6411:tid 140353239717632] [client 4.205.62.107:30552] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sale.php"] [unique_id "apeAwq-5XxGfLhlq8xmA0AAAANE"]
[Tue Sep 01 20:49:55.849214 2026] [:error] [pid 29730:tid 140353214539520] [client 4.205.62.107:30402] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/fns.php"] [unique_id "apeAw0KKsXadAWpiFbsuowAAAlQ"]
[Tue Sep 01 20:49:57.065546 2026] [:error] [pid 28194:tid 140353214539520] [client 4.205.62.107:30586] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/koiy.php"] [unique_id "apeAxQdz-EN0cDNAEVKTyAAAAVQ"]
[Tue Sep 01 20:49:58.275370 2026] [:error] [pid 11529:tid 140353206146816] [client 4.205.62.107:31043] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/aww.php"] [unique_id "apeAxi580fjDz1VV6yccSgAAAdU"]
[Tue Sep 01 20:49:59.514518 2026] [:error] [pid 28194:tid 140353256503040] [client 4.205.62.107:30539] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/requirements.php"] [unique_id "apeAxwdz-EN0cDNAEVKTzAAAAU8"]
[Tue Sep 01 20:50:00.733854 2026] [:error] [pid 6089:tid 140353452353280] [client 4.205.62.107:31273] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/retu11.PhP"] [unique_id "apeAyJjeM2TaVrIYSc-JZQAAAAA"]
[Tue Sep 01 20:50:01.951333 2026] [:error] [pid 28500:tid 140353264895744] [client 4.205.62.107:30417] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/guk.php"] [unique_id "apeAyTQYUm0S3Gh9Jn93mgAAAY4"]
[Tue Sep 01 20:50:03.168608 2026] [:error] [pid 6411:tid 140353206146816] [client 4.205.62.107:31099] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/linusadmin-phpinfo.php"] [unique_id "apeAy6-5XxGfLhlq8xmA1QAAANU"]
[Tue Sep 01 20:50:04.383446 2026] [:error] [pid 6091:tid 140353435567872] [client 4.205.62.107:30581] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ws61.php"] [unique_id "apeAzMkVYOXruxV21N5q2gAAAII"]
[Tue Sep 01 20:50:05.622555 2026] [:error] [pid 9194:tid 140353180968704] [client 4.205.62.107:31233] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/test.php"] [unique_id "apeAzYdqWCmIAB5WEG_FEQAAARg"]
[Tue Sep 01 20:50:06.835584 2026] [:error] [pid 6089:tid 140353357215488] [client 4.205.62.107:31293] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/aws_settings.php"] [unique_id "apeAzpjeM2TaVrIYSc-JawAAAAM"]
[Tue Sep 01 20:50:08.052359 2026] [:error] [pid 29615:tid 140353248110336] [client 4.205.62.107:31258] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/brc.php"] [unique_id "apeA0J1PBa8fnDJM-t4WyQAAAhA"]
[Tue Sep 01 20:50:09.270847 2026] [:error] [pid 28194:tid 140353315251968] [client 4.205.62.107:30590] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/asdf.php"] [unique_id "apeA0Qdz-EN0cDNAEVKT0wAAAUg"]
[Tue Sep 01 20:50:10.484933 2026] [:error] [pid 6091:tid 140353222932224] [client 4.205.62.107:31244] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/avim.php"] [unique_id "apeA0skVYOXruxV21N5q3AAAAJM"]
[Tue Sep 01 20:50:11.687238 2026] [:error] [pid 6089:tid 140353340430080] [client 4.205.62.107:31098] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/old_phpinfo.php"] [unique_id "apeA05jeM2TaVrIYSc-JcQAAAAU"]
[Tue Sep 01 20:50:20.635249 2026] [:error] [pid 28194:tid 140353452353280] [client 4.205.62.107:31086] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/adminfus.php"] [unique_id "apeA3Adz-EN0cDNAEVKT2QAAAUA"]
[Tue Sep 01 20:50:22.182236 2026] [:error] [pid 29615:tid 140353239717632] [client 4.205.62.107:31240] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/session.php"] [unique_id "apeA3p1PBa8fnDJM-t4W1wAAAhE"]
[Tue Sep 01 20:50:23.384673 2026] [:error] [pid 6089:tid 140353281681152] [client 4.205.62.107:30536] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/otuz1.php"] [unique_id "apeA35jeM2TaVrIYSc-JewAAAAw"]
[Tue Sep 01 20:50:24.609438 2026] [:error] [pid 29615:tid 140353332037376] [client 4.205.62.107:31097] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/time.php"] [unique_id "apeA4J1PBa8fnDJM-t4W2gAAAgY"]
[Tue Sep 01 20:50:25.820293 2026] [:error] [pid 9194:tid 140353248110336] [client 4.205.62.107:30449] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apeA4YdqWCmIAB5WEG_FFQAAARA"]
[Tue Sep 01 20:50:27.037021 2026] [:error] [pid 6090:tid 140353206146816] [client 4.205.62.107:31281] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ah25.php"] [unique_id "apeA47Pf1VxWhFqgvWthuAAAAFU"]
[Tue Sep 01 20:50:28.554712 2026] [:error] [pid 9194:tid 140353281681152] [client 4.205.62.107:31285] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ccou.php"] [unique_id "apeA5IdqWCmIAB5WEG_FGQAAAQw"]
[Tue Sep 01 20:50:29.771005 2026] [:error] [pid 6089:tid 140353315251968] [client 4.205.62.107:30432] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/xin1.php"] [unique_id "apeA5ZjeM2TaVrIYSc-JggAAAAg"]
[Tue Sep 01 20:50:30.986240 2026] [:error] [pid 28194:tid 140353315251968] [client 4.205.62.107:31294] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/xmy.php"] [unique_id "apeA5gdz-EN0cDNAEVKT3gAAAUg"]
[Tue Sep 01 20:50:32.195419 2026] [:error] [pid 6089:tid 140353248110336] [client 4.205.62.107:31254] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpi.php"] [unique_id "apeA6JjeM2TaVrIYSc-JhQAAABA"]
[Tue Sep 01 20:50:33.410008 2026] [:error] [pid 29730:tid 140353239717632] [client 4.205.62.107:31050] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/hosty.php"] [unique_id "apeA6UKKsXadAWpiFbsusAAAAlE"]
[Tue Sep 01 20:50:34.623834 2026] [:error] [pid 6091:tid 140353214539520] [client 4.205.62.107:31261] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/atex1.php"] [unique_id "apeA6skVYOXruxV21N5q5wAAAJQ"]
[Tue Sep 01 20:50:35.842913 2026] [:error] [pid 29615:tid 140353443960576] [client 4.205.62.107:31268] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/mcebraed.php"] [unique_id "apeA651PBa8fnDJM-t4W3QAAAgE"]
[Tue Sep 01 20:50:37.058236 2026] [:error] [pid 6089:tid 140353298466560] [client 4.205.62.107:30436] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/php-details.php"] [unique_id "apeA7ZjeM2TaVrIYSc-JiQAAAAo"]
[Tue Sep 01 20:50:39.218934 2026] [:error] [pid 6089:tid 140353189361408] [client 4.205.62.107:31092] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/grsiuk.php"] [unique_id "apeA75jeM2TaVrIYSc-JjQAAABc"]
[Tue Sep 01 20:50:40.480972 2026] [:error] [pid 6089:tid 140353435567872] [client 4.205.62.107:31282] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/config_dev.php"] [unique_id "apeA8JjeM2TaVrIYSc-JkAAAAAI"]
[Tue Sep 01 20:50:41.804931 2026] [:error] [pid 28194:tid 140353435567872] [client 4.205.62.107:30587] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/vx.php"] [unique_id "apeA8Qdz-EN0cDNAEVKT5QAAAUI"]
[Tue Sep 01 20:50:43.018946 2026] [:error] [pid 28194:tid 140353290073856] [client 4.205.62.107:31093] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/pinfo.php"] [unique_id "apeA8wdz-EN0cDNAEVKT6AAAAUs"]
[Tue Sep 01 20:50:44.231996 2026] [:error] [pid 6411:tid 140353206146816] [client 4.205.62.107:31040] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/edit.php"] [unique_id "apeA9K-5XxGfLhlq8xmA3QAAANU"]
[Tue Sep 01 20:50:45.452375 2026] [:error] [pid 29615:tid 140353180968704] [client 4.205.62.107:30578] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/debuggen.php"] [unique_id "apeA9Z1PBa8fnDJM-t4W3gAAAhg"]
[Tue Sep 01 20:50:46.715684 2026] [:error] [pid 9194:tid 140353273288448] [client 4.205.62.107:31292] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-act.php"] [unique_id "apeA9odqWCmIAB5WEG_FHgAAAQ0"]
[Tue Sep 01 20:50:47.932606 2026] [:error] [pid 6411:tid 140353281681152] [client 4.205.62.107:30413] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/chosen.php"] [unique_id "apeA96-5XxGfLhlq8xmA3gAAAMw"]
[Tue Sep 01 20:50:49.148197 2026] [:error] [pid 6411:tid 140353290073856] [client 4.205.62.107:31252] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/public/wp-blog.php"] [unique_id "apeA-a-5XxGfLhlq8xmA4AAAAMs"]
[Tue Sep 01 20:50:50.368004 2026] [:error] [pid 28500:tid 140353340430080] [client 4.205.62.107:30361] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/queue.php"] [unique_id "apeA-jQYUm0S3Gh9Jn93nwAAAYU"]
[Tue Sep 01 20:50:51.595097 2026] [:error] [pid 29615:tid 140353357215488] [client 4.205.62.107:30442] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/admin-ajax.php"] [unique_id "apeA-51PBa8fnDJM-t4W5QAAAgM"]
[Tue Sep 01 20:50:52.801443 2026] [:error] [pid 11529:tid 140353435567872] [client 4.205.62.107:31069] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/btx25.php"] [unique_id "apeA_C580fjDz1VV6yccYAAAAcI"]
[Tue Sep 01 20:50:54.015985 2026] [:error] [pid 28194:tid 140353231324928] [client 4.205.62.107:31238] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/goods.php"] [unique_id "apeA_gdz-EN0cDNAEVKUGwAAAVI"]
[Tue Sep 01 20:50:55.234669 2026] [:error] [pid 28500:tid 140353357215488] [client 4.205.62.107:31052] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/umgebung.php"] [unique_id "apeA_zQYUm0S3Gh9Jn93oQAAAYM"]
[Tue Sep 01 20:50:56.434777 2026] [:error] [pid 28500:tid 140353273288448] [client 4.205.62.107:30545] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/124.php"] [unique_id "apeBADQYUm0S3Gh9Jn93ogAAAY0"]
[Tue Sep 01 20:50:57.644338 2026] [:error] [pid 6091:tid 140353264895744] [client 4.205.62.107:30543] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file59.php"] [unique_id "apeBAckVYOXruxV21N5q7gAAAI4"]
[Tue Sep 01 20:50:58.871113 2026] [:error] [pid 6089:tid 140353264895744] [client 4.205.62.107:31271] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/thui.php"] [unique_id "apeBApjeM2TaVrIYSc-JnwAAAA4"]
[Tue Sep 01 20:51:00.085991 2026] [:error] [pid 11529:tid 140353290073856] [client 4.205.62.107:31089] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/server-info.php"] [unique_id "apeBBC580fjDz1VV6yccYQAAAcs"]
[Tue Sep 01 20:51:01.322134 2026] [:error] [pid 6089:tid 140353180968704] [client 4.205.62.107:30450] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ws79.php"] [unique_id "apeBBZjeM2TaVrIYSc-JoQAAABg"]
[Tue Sep 01 20:51:02.681899 2026] [:error] [pid 6089:tid 140353206146816] [client 4.205.62.107:31065] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/routes.php"] [unique_id "apeBBpjeM2TaVrIYSc-JpAAAABU"]
[Tue Sep 01 20:51:03.916077 2026] [:error] [pid 6089:tid 140353222932224] [client 4.205.62.107:31090] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/public/rip.php.php"] [unique_id "apeBB5jeM2TaVrIYSc-JpwAAABM"]
[Tue Sep 01 20:51:06.031810 2026] [:error] [pid 28194:tid 140353443960576] [client 4.205.62.107:31286] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wsws.php"] [unique_id "apeBCgdz-EN0cDNAEVKUTQAAAUE"]
[Tue Sep 01 20:51:07.264101 2026] [:error] [pid 28194:tid 140353197754112] [client 4.205.62.107:30571] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/nlnub.php"] [unique_id "apeBCwdz-EN0cDNAEVKUUwAAAVY"]
[Tue Sep 01 20:51:08.481177 2026] [:error] [pid 11529:tid 140353348822784] [client 4.205.62.107:30529] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sys.php"] [unique_id "apeBDC580fjDz1VV6yccZQAAAcQ"]
[Tue Sep 01 20:51:09.698028 2026] [:error] [pid 28194:tid 140353281681152] [client 4.205.62.107:31103] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sadd.php"] [unique_id "apeBDQdz-EN0cDNAEVKUXgAAAUw"]
[Tue Sep 01 20:51:10.931109 2026] [:error] [pid 28194:tid 140353435567872] [client 4.205.62.107:30568] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cloud.php"] [unique_id "apeBDgdz-EN0cDNAEVKUZAAAAUI"]
[Tue Sep 01 20:51:12.156573 2026] [:error] [pid 28500:tid 140353231324928] [client 4.205.62.107:30865] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-info.php"] [unique_id "apeBEDQYUm0S3Gh9Jn93pAAAAZI"]
[Tue Sep 01 20:51:13.365780 2026] [:error] [pid 6089:tid 140353197754112] [client 4.205.62.107:31041] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/upload.form.php"] [unique_id "apeBEZjeM2TaVrIYSc-JsQAAABY"]
[Tue Sep 01 20:51:14.582197 2026] [:error] [pid 6089:tid 140353315251968] [client 4.205.62.107:30554] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/png.php"] [unique_id "apeBEpjeM2TaVrIYSc-JsgAAAAg"]
[Tue Sep 01 20:51:15.804414 2026] [:error] [pid 6089:tid 140353298466560] [client 4.205.62.107:30370] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/configuration.php"] [unique_id "apeBE5jeM2TaVrIYSc-JtgAAAAo"]
[Tue Sep 01 20:51:17.019031 2026] [:error] [pid 6089:tid 140353256503040] [client 4.205.62.107:31283] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/25.php"] [unique_id "apeBFZjeM2TaVrIYSc-JuQAAAA8"]
[Tue Sep 01 20:51:18.236717 2026] [:error] [pid 6090:tid 140353348822784] [client 4.205.62.107:30582] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/pass4.php"] [unique_id "apeBFrPf1VxWhFqgvWthxQAAAEQ"]
[Tue Sep 01 20:51:19.561276 2026] [:error] [pid 28500:tid 140353256503040] [client 4.205.62.107:31243] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/public/vx.php"] [unique_id "apeBFzQYUm0S3Gh9Jn93pwAAAY8"]
[Tue Sep 01 20:51:20.762832 2026] [:error] [pid 29730:tid 140353197754112] [client 4.205.62.107:30560] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/olfclass.php"] [unique_id "apeBGEKKsXadAWpiFbsuvgAAAlY"]
[Tue Sep 01 20:51:21.987017 2026] [:error] [pid 29730:tid 140353348822784] [client 4.205.62.107:31066] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/test1.php"] [unique_id "apeBGUKKsXadAWpiFbsuwAAAAkQ"]
[Tue Sep 01 20:51:41.933186 2026] [:error] [pid 6089:tid 140353231324928] [client 4.205.62.107:31275] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ty.php"] [unique_id "apeBLZjeM2TaVrIYSc-J0wAAABI"]
[Tue Sep 01 20:51:43.229865 2026] [:error] [pid 6091:tid 140353206146816] [client 4.205.62.107:31075] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/myfile.php"] [unique_id "apeBL8kVYOXruxV21N5rHgAAAJU"]
[Tue Sep 01 20:51:45.671439 2026] [:error] [pid 29730:tid 140353290073856] [client 4.205.62.107:30434] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/fff.php"] [unique_id "apeBMUKKsXadAWpiFbsu-QAAAks"]
[Tue Sep 01 20:51:46.882393 2026] [:error] [pid 6091:tid 140353239717632] [client 4.205.62.107:30430] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/bootstrap.php"] [unique_id "apeBMskVYOXruxV21N5rIQAAAJE"]
[Tue Sep 01 20:51:48.096178 2026] [:error] [pid 28194:tid 140353306859264] [client 4.205.62.107:30359] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/server_info.php"] [unique_id "apeBNAdz-EN0cDNAEVKUyAAAAUk"]
[Tue Sep 01 20:51:49.315169 2026] [:error] [pid 28194:tid 140353340430080] [client 4.205.62.107:31068] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/X57.php"] [unique_id "apeBNQdz-EN0cDNAEVKUyQAAAUU"]
[Tue Sep 01 20:51:50.528969 2026] [:error] [pid 6091:tid 140353298466560] [client 4.205.62.107:30575] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/temp.php"] [unique_id "apeBNskVYOXruxV21N5rJAAAAIo"]
[Tue Sep 01 20:51:51.733412 2026] [:error] [pid 28194:tid 140353214539520] [client 4.205.62.107:31287] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/aws.php"] [unique_id "apeBNwdz-EN0cDNAEVKUygAAAVQ"]
[Tue Sep 01 20:51:52.948412 2026] [:error] [pid 6089:tid 140353315251968] [client 4.205.62.107:31260] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/services.php"] [unique_id "apeBOJjeM2TaVrIYSc-J3wAAAAg"]
[Tue Sep 01 20:51:54.150092 2026] [:error] [pid 29615:tid 140353273288448] [client 4.205.62.107:30572] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/radio.php"] [unique_id "apeBOp1PBa8fnDJM-t4W_wAAAg0"]
[Tue Sep 01 20:51:55.371099 2026] [:error] [pid 6089:tid 140353298466560] [client 4.205.62.107:30551] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/fleen.php"] [unique_id "apeBO5jeM2TaVrIYSc-J4gAAAAo"]
[Tue Sep 01 20:51:57.836484 2026] [:error] [pid 6091:tid 140353315251968] [client 4.205.62.107:31051] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file21.php"] [unique_id "apeBPckVYOXruxV21N5rRQAAAIg"]
[Tue Sep 01 20:51:59.050913 2026] [:error] [pid 6091:tid 140353206146816] [client 4.205.62.107:31058] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/f35.php"] [unique_id "apeBP8kVYOXruxV21N5rVAAAAJU"]
[Tue Sep 01 20:52:00.266955 2026] [:error] [pid 29615:tid 140353214539520] [client 4.205.62.107:31060] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/paypal.php"] [unique_id "apeBQJ1PBa8fnDJM-t4XAAAAAhQ"]
[Tue Sep 01 20:52:01.485811 2026] [:error] [pid 29730:tid 140353290073856] [client 4.205.62.107:30561] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-access.php"] [unique_id "apeBQUKKsXadAWpiFbsvPgAAAks"]
[Tue Sep 01 20:52:02.700895 2026] [:error] [pid 28194:tid 140353315251968] [client 4.205.62.107:31263] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cxc.php"] [unique_id "apeBQgdz-EN0cDNAEVKUzQAAAUg"]
[Tue Sep 01 20:52:03.920222 2026] [:error] [pid 6089:tid 140353281681152] [client 4.205.62.107:30420] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/xda.php"] [unique_id "apeBQ5jeM2TaVrIYSc-J6AAAAAw"]
[Tue Sep 01 20:52:05.135242 2026] [:error] [pid 6089:tid 140353239717632] [client 4.205.62.107:30462] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/aws_secret_config.php"] [unique_id "apeBRZjeM2TaVrIYSc-J6gAAABE"]
[Tue Sep 01 20:52:06.368852 2026] [:error] [pid 6089:tid 140353180968704] [client 4.205.62.107:30429] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/public/bnn_.php.php"] [unique_id "apeBRpjeM2TaVrIYSc-J7AAAABg"]
[Tue Sep 01 20:52:07.595973 2026] [:error] [pid 29730:tid 140353348822784] [client 4.205.62.107:30369] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/application.config.php"] [unique_id "apeBR0KKsXadAWpiFbsvPwAAAkQ"]
[Tue Sep 01 20:52:08.804190 2026] [:error] [pid 28194:tid 140353290073856] [client 4.205.62.107:31078] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/oiko6u.php"] [unique_id "apeBSAdz-EN0cDNAEVKU2QAAAUs"]
[Tue Sep 01 20:52:10.028012 2026] [:error] [pid 6091:tid 140353239717632] [client 4.205.62.107:31289] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/app_local.php"] [unique_id "apeBSskVYOXruxV21N5rlQAAAJE"]
[Tue Sep 01 20:52:11.967127 2026] [:error] [pid 9194:tid 140353206146816] [client 4.205.62.107:31245] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/erty.php"] [unique_id "apeBS4dqWCmIAB5WEG_FLAAAARU"]
[Tue Sep 01 20:52:13.181808 2026] [:error] [pid 6091:tid 140353298466560] [client 4.205.62.107:31057] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/aws_keys.php"] [unique_id "apeBTckVYOXruxV21N5rmAAAAIo"]
[Tue Sep 01 20:52:14.382658 2026] [:error] [pid 28500:tid 140353197754112] [client 4.205.62.107:30412] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/filesystems.php"] [unique_id "apeBTjQYUm0S3Gh9Jn93xAAAAZY"]
[Tue Sep 01 20:52:15.599887 2026] [:error] [pid 6091:tid 140353231324928] [client 4.205.62.107:31251] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/bigdump.php"] [unique_id "apeBT8kVYOXruxV21N5rmwAAAJI"]
[Tue Sep 01 20:52:16.827258 2026] [:error] [pid 6089:tid 140353248110336] [client 4.205.62.107:30340] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gnmlc.php"] [unique_id "apeBUJjeM2TaVrIYSc-J8wAAABA"]
[Tue Sep 01 20:52:18.039158 2026] [:error] [pid 28194:tid 140353435567872] [client 4.205.62.107:31100] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/mamzi.php"] [unique_id "apeBUgdz-EN0cDNAEVKU3QAAAUI"]
[Tue Sep 01 20:52:19.252859 2026] [:error] [pid 11529:tid 140353306859264] [client 4.205.62.107:30426] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "apeBUy580fjDz1VV6ycclAAAAck"]
[Tue Sep 01 20:52:20.356611 2026] [proxy_fcgi:error] [pid 29730:tid 140353256503040] [client 54.39.151.139:34313] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 20:52:20.452381 2026] [:error] [pid 6090:tid 140353340430080] [client 4.205.62.107:31044] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/nzv.php"] [unique_id "apeBVLPf1VxWhFqgvWth0AAAAEU"]
[Tue Sep 01 20:52:21.670688 2026] [:error] [pid 6091:tid 140353348822784] [client 4.205.62.107:31048] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/4563.php"] [unique_id "apeBVckVYOXruxV21N5rnQAAAIQ"]
[Tue Sep 01 20:52:22.888288 2026] [:error] [pid 29615:tid 140353256503040] [client 4.205.62.107:30376] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/debug.php"] [unique_id "apeBVp1PBa8fnDJM-t4XAwAAAg8"]
[Tue Sep 01 20:52:24.118219 2026] [:error] [pid 6089:tid 140353340430080] [client 4.205.62.107:30405] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/lm15.php"] [unique_id "apeBWJjeM2TaVrIYSc-J-QAAAAU"]
[Tue Sep 01 20:52:25.321233 2026] [:error] [pid 28500:tid 140353264895744] [client 4.205.62.107:30354] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cache-compat.php"] [unique_id "apeBWTQYUm0S3Gh9Jn93yAAAAY4"]
[Tue Sep 01 20:52:26.526754 2026] [:error] [pid 6411:tid 140353443960576] [client 4.205.62.107:30407] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/app_dev.php"] [unique_id "apeBWq-5XxGfLhlq8xmBOwAAAME"]
[Tue Sep 01 20:52:27.741248 2026] [:error] [pid 6089:tid 140353332037376] [client 4.205.62.107:30416] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/plss3.php"] [unique_id "apeBW5jeM2TaVrIYSc-J_QAAAAY"]
[Tue Sep 01 20:52:28.957296 2026] [:error] [pid 6091:tid 140353290073856] [client 4.205.62.107:31073] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gecko-litespeed.php"] [unique_id "apeBXMkVYOXruxV21N5roQAAAIs"]
[Tue Sep 01 20:52:31.517570 2026] [:error] [pid 6091:tid 140353197754112] [client 4.205.62.107:31049] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/env.php"] [unique_id "apeBX8kVYOXruxV21N5rpQAAAJY"]
[Tue Sep 01 20:52:32.718351 2026] [:error] [pid 29730:tid 140353340430080] [client 4.205.62.107:30357] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/8.php"] [unique_id "apeBYEKKsXadAWpiFbsvRgAAAkU"]
[Tue Sep 01 20:52:33.921523 2026] [:error] [pid 29730:tid 140353239717632] [client 4.205.62.107:30534] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/thui.php"] [unique_id "apeBYUKKsXadAWpiFbsvRwAAAlE"]
[Tue Sep 01 20:52:35.172599 2026] [:error] [pid 9194:tid 140353222932224] [client 4.205.62.107:30549] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/public/mah.php.php"] [unique_id "apeBY4dqWCmIAB5WEG_FLQAAARM"]
[Tue Sep 01 20:52:36.385617 2026] [:error] [pid 6091:tid 140353443960576] [client 4.205.62.107:30453] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/kedi.php"] [unique_id "apeBZMkVYOXruxV21N5rpwAAAIE"]
[Tue Sep 01 20:52:37.592368 2026] [:error] [pid 6089:tid 140353214539520] [client 4.205.62.107:31088] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/u88.php"] [unique_id "apeBZZjeM2TaVrIYSc-J_gAAABQ"]
[Tue Sep 01 20:52:38.796362 2026] [:error] [pid 9194:tid 140353214539520] [client 4.205.62.107:30339] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/rum.or.php"] [unique_id "apeBZodqWCmIAB5WEG_FMAAAARQ"]
[Tue Sep 01 20:52:39.998708 2026] [:error] [pid 6089:tid 140353357215488] [client 4.205.62.107:30388] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpsysinfo.php"] [unique_id "apeBZ5jeM2TaVrIYSc-KAQAAAAM"]
[Tue Sep 01 20:52:41.207180 2026] [:error] [pid 28194:tid 140353222932224] [client 4.205.62.107:30557] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wdf.php"] [unique_id "apeBaQdz-EN0cDNAEVKU5gAAAVM"]
[Tue Sep 01 20:52:42.409766 2026] [:error] [pid 29730:tid 140353306859264] [client 4.205.62.107:30368] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/maxro.php"] [unique_id "apeBakKKsXadAWpiFbsvSwAAAkk"]
[Tue Sep 01 20:52:43.626394 2026] [:error] [pid 29730:tid 140353452353280] [client 4.205.62.107:30367] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/loxi-o.php"] [unique_id "apeBa0KKsXadAWpiFbsvTAAAAkA"]
[Tue Sep 01 20:52:44.841339 2026] [:error] [pid 6091:tid 140353281681152] [client 4.205.62.107:30537] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/rpk.php"] [unique_id "apeBbMkVYOXruxV21N5rqQAAAIw"]
[Tue Sep 01 20:52:46.045472 2026] [:error] [pid 28194:tid 140353189361408] [client 4.205.62.107:31095] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sgd.php"] [unique_id "apeBbgdz-EN0cDNAEVKU6AAAAVc"]
[Tue Sep 01 20:52:47.249103 2026] [:error] [pid 11529:tid 140353231324928] [client 4.205.62.107:30562] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/tinyfilemanager.php"] [unique_id "apeBby580fjDz1VV6yccnwAAAdI"]
[Tue Sep 01 21:03:59.395627 2026] [proxy_fcgi:error] [pid 6089:tid 140353273288448] [client 92.33.32.142:36624] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:16:38.100897 2026] [proxy_fcgi:error] [pid 6090:tid 140353452353280] [client 94.23.78.49:44702] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:21:32.226038 2026] [:error] [pid 6089:tid 140353443960576] [client 43.162.103.213:33024] [client 43.162.103.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apeILJjeM2TaVrIYSc-QAAAAAAE"]
[Tue Sep 01 21:26:28.844474 2026] [proxy_fcgi:error] [pid 11529:tid 140353357215488] [client 217.79.181.38:44058] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:27.124727 2026] [proxy_fcgi:error] [pid 29730:tid 140353189361408] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:27.238837 2026] [proxy_fcgi:error] [pid 29730:tid 140353281681152] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:27.346226 2026] [proxy_fcgi:error] [pid 29730:tid 140353323644672] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:27.451570 2026] [proxy_fcgi:error] [pid 29730:tid 140353306859264] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:27.557381 2026] [proxy_fcgi:error] [pid 29730:tid 140353290073856] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:27.664218 2026] [proxy_fcgi:error] [pid 29730:tid 140353332037376] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:27.770824 2026] [proxy_fcgi:error] [pid 29730:tid 140353435567872] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:27.880345 2026] [proxy_fcgi:error] [pid 29730:tid 140353206146816] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:27.993471 2026] [proxy_fcgi:error] [pid 29730:tid 140353248110336] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:28.100616 2026] [proxy_fcgi:error] [pid 29730:tid 140353214539520] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:28.209528 2026] [proxy_fcgi:error] [pid 29730:tid 140353315251968] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:28.321803 2026] [proxy_fcgi:error] [pid 29730:tid 140353357215488] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:28.428103 2026] [proxy_fcgi:error] [pid 29730:tid 140353443960576] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:28.533129 2026] [proxy_fcgi:error] [pid 29730:tid 140353348822784] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:28.641680 2026] [proxy_fcgi:error] [pid 29730:tid 140353452353280] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:28.759120 2026] [proxy_fcgi:error] [pid 29730:tid 140353180968704] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:28.866839 2026] [proxy_fcgi:error] [pid 29730:tid 140353273288448] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:28.972310 2026] [proxy_fcgi:error] [pid 29730:tid 140353197754112] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:29.080745 2026] [proxy_fcgi:error] [pid 29730:tid 140353239717632] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:29.191871 2026] [proxy_fcgi:error] [pid 29730:tid 140353231324928] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:29.299744 2026] [proxy_fcgi:error] [pid 29730:tid 140353264895744] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:29.408030 2026] [proxy_fcgi:error] [pid 29730:tid 140353222932224] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:29.517474 2026] [proxy_fcgi:error] [pid 29730:tid 140353256503040] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:29.623383 2026] [proxy_fcgi:error] [pid 29730:tid 140353298466560] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:29.733976 2026] [proxy_fcgi:error] [pid 29730:tid 140353340430080] [client 20.104.49.130:38679] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 21:37:29.734110 2026] [:error] [pid 29730:tid 140353340430080] [client 20.104.49.130:38679] [client 20.104.49.130] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/small.php"] [unique_id "apeL6UKKsXadAWpiFbsziAAAAkU"]
[Tue Sep 01 21:37:29.836606 2026] [:error] [pid 29730:tid 140353189361408] [client 20.104.49.130:38679] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/about/goods.php"] [unique_id "apeL6UKKsXadAWpiFbsziQAAAlc"]
[Tue Sep 01 21:37:30.056740 2026] [:error] [pid 29615:tid 140353452353280] [client 20.104.49.130:38680] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/congeree.php"] [unique_id "apeL6p1PBa8fnDJM-t4aEgAAAgA"]
[Tue Sep 01 21:37:30.276861 2026] [:error] [pid 6091:tid 140353273288448] [client 20.104.49.130:38361] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/666666.php"] [unique_id "apeL6skVYOXruxV21N5z8gAAAI0"]
[Tue Sep 01 21:37:30.484075 2026] [:error] [pid 6091:tid 140353357215488] [client 20.104.49.130:38365] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/navbar.php"] [unique_id "apeL6skVYOXruxV21N5z8wAAAIM"]
[Tue Sep 01 21:37:30.793021 2026] [:error] [pid 6411:tid 140353248110336] [client 20.104.49.130:38350] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lala.php"] [unique_id "apeL6q-5XxGfLhlq8xmFXAAAANA"]
[Tue Sep 01 21:37:31.001180 2026] [:error] [pid 28194:tid 140353197754112] [client 20.104.49.130:38657] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/css.php"] [unique_id "apeL6wdz-EN0cDNAEVKb5gAAAVY"]
[Tue Sep 01 21:37:31.222430 2026] [:error] [pid 6090:tid 140353239717632] [client 20.104.49.130:38352] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/plss3.php"] [unique_id "apeL67Pf1VxWhFqgvWtlVwAAAFE"]
[Tue Sep 01 21:37:31.424708 2026] [:error] [pid 29615:tid 140353264895744] [client 20.104.49.130:38344] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phina.php"] [unique_id "apeL651PBa8fnDJM-t4aEwAAAg4"]
[Tue Sep 01 21:37:31.629231 2026] [:error] [pid 28500:tid 140353298466560] [client 20.104.49.130:38674] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/87.php"] [unique_id "apeL6zQYUm0S3Gh9Jn97LQAAAYo"]
[Tue Sep 01 21:37:31.835444 2026] [:error] [pid 29615:tid 140353222932224] [client 20.104.49.130:38656] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hosty.php"] [unique_id "apeL651PBa8fnDJM-t4aFAAAAhM"]
[Tue Sep 01 21:37:32.038493 2026] [:error] [pid 29615:tid 140353231324928] [client 20.104.49.130:38670] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo01.php"] [unique_id "apeL7J1PBa8fnDJM-t4aFQAAAhI"]
[Tue Sep 01 21:37:32.262087 2026] [:error] [pid 6091:tid 140353214539520] [client 20.104.49.130:38359] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kedi.php"] [unique_id "apeL7MkVYOXruxV21N5z9QAAAJQ"]
[Tue Sep 01 21:37:32.468138 2026] [:error] [pid 6091:tid 140353443960576] [client 20.104.49.130:38683] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apeL7MkVYOXruxV21N5z9gAAAIE"]
[Tue Sep 01 21:37:32.682977 2026] [:error] [pid 28500:tid 140353256503040] [client 20.104.49.130:38336] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/doc.php"] [unique_id "apeL7DQYUm0S3Gh9Jn97LgAAAY8"]
[Tue Sep 01 21:37:32.890687 2026] [:error] [pid 6089:tid 140353452353280] [client 20.104.49.130:38684] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file21.php"] [unique_id "apeL7JjeM2TaVrIYSc-VywAAAAA"]
[Tue Sep 01 21:37:33.107782 2026] [:error] [pid 6089:tid 140353332037376] [client 20.104.49.130:38691] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/register.php"] [unique_id "apeL7ZjeM2TaVrIYSc-VzQAAAAY"]
[Tue Sep 01 21:37:33.333286 2026] [:error] [pid 28194:tid 140353231324928] [client 20.104.49.130:38676] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/atex1.php"] [unique_id "apeL7Qdz-EN0cDNAEVKb6gAAAVI"]
[Tue Sep 01 21:37:33.536212 2026] [:error] [pid 28194:tid 140353298466560] [client 20.104.49.130:38690] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/oc460l3x.php"] [unique_id "apeL7Qdz-EN0cDNAEVKb6wAAAUo"]
[Tue Sep 01 21:37:33.755403 2026] [:error] [pid 28194:tid 140353290073856] [client 20.104.49.130:38375] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lm15.php"] [unique_id "apeL7Qdz-EN0cDNAEVKb7AAAAUs"]
[Tue Sep 01 21:37:33.960066 2026] [:error] [pid 6089:tid 140353298466560] [client 20.104.49.130:38677] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/drykl.php"] [unique_id "apeL7ZjeM2TaVrIYSc-VzwAAAAo"]
[Tue Sep 01 21:37:34.174144 2026] [:error] [pid 6089:tid 140353340430080] [client 20.104.49.130:38697] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fns.php"] [unique_id "apeL7pjeM2TaVrIYSc-V0AAAAAU"]
[Tue Sep 01 21:37:34.389184 2026] [:error] [pid 6411:tid 140353273288448] [client 20.104.49.130:38342] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/333.php"] [unique_id "apeL7q-5XxGfLhlq8xmFXQAAAM0"]
[Tue Sep 01 21:37:34.599910 2026] [:error] [pid 9194:tid 140353189361408] [client 20.104.49.130:38659] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpi.php"] [unique_id "apeL7odqWCmIAB5WEG_H5AAAARc"]
[Tue Sep 01 21:37:34.806387 2026] [:error] [pid 28500:tid 140353443960576] [client 20.104.49.130:38689] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/25.php"] [unique_id "apeL7jQYUm0S3Gh9Jn97MAAAAYE"]
[Tue Sep 01 21:37:35.035504 2026] [:error] [pid 6091:tid 140353306859264] [client 20.104.49.130:38709] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bengi.php"] [unique_id "apeL78kVYOXruxV21N5z-AAAAIk"]
[Tue Sep 01 21:37:35.247998 2026] [:error] [pid 11529:tid 140353340430080] [client 20.104.49.130:38313] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/server-info.php"] [unique_id "apeL7y580fjDz1VV6ychJgAAAcU"]
[Tue Sep 01 21:37:42.773905 2026] [:error] [pid 11529:tid 140353189361408] [client 20.104.49.130:38719] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nlnub.php"] [unique_id "apeL9i580fjDz1VV6ychJwAAAdc"]
[Tue Sep 01 21:37:42.976951 2026] [:error] [pid 6089:tid 140353315251968] [client 20.104.49.130:38707] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/124.php"] [unique_id "apeL9pjeM2TaVrIYSc-V1QAAAAg"]
[Tue Sep 01 21:37:43.188375 2026] [:error] [pid 6089:tid 140353290073856] [client 20.104.49.130:38357] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gnmlc.php"] [unique_id "apeL95jeM2TaVrIYSc-V1gAAAAs"]
[Tue Sep 01 21:37:43.392158 2026] [:error] [pid 29730:tid 140353290073856] [client 20.104.49.130:38286] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/png.php"] [unique_id "apeL90KKsXadAWpiFbsziwAAAks"]
[Tue Sep 01 21:37:43.596525 2026] [:error] [pid 6411:tid 140353323644672] [client 20.104.49.130:38398] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/error_log.php"] [unique_id "apeL96-5XxGfLhlq8xmFYwAAAMc"]
[Tue Sep 01 21:37:43.814051 2026] [:error] [pid 28194:tid 140353435567872] [client 20.104.49.130:38669] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/saml.php"] [unique_id "apeL9wdz-EN0cDNAEVKb7wAAAUI"]
[Tue Sep 01 21:37:44.018671 2026] [:error] [pid 6090:tid 140353443960576] [client 20.104.49.130:38353] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cp2.php"] [unique_id "apeL-LPf1VxWhFqgvWtlWAAAAEE"]
[Tue Sep 01 21:37:44.230978 2026] [:error] [pid 11529:tid 140353222932224] [client 20.104.49.130:38367] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ms-edit.php"] [unique_id "apeL-C580fjDz1VV6ychKAAAAdM"]
[Tue Sep 01 21:37:44.436126 2026] [:error] [pid 6089:tid 140353264895744] [client 20.104.49.130:38698] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/test1.php"] [unique_id "apeL-JjeM2TaVrIYSc-V1wAAAA4"]
[Tue Sep 01 21:37:44.639231 2026] [:error] [pid 6090:tid 140353264895744] [client 20.104.49.130:38715] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fraro.php"] [unique_id "apeL-LPf1VxWhFqgvWtlWQAAAE4"]
[Tue Sep 01 21:37:44.852196 2026] [:error] [pid 29615:tid 140353340430080] [client 20.104.49.130:38682] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/otuz1.php"] [unique_id "apeL-J1PBa8fnDJM-t4aFgAAAgU"]
[Tue Sep 01 21:37:45.056465 2026] [:error] [pid 6089:tid 140353239717632] [client 20.104.49.130:38372] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/4563.php"] [unique_id "apeL-ZjeM2TaVrIYSc-V2AAAABE"]
[Tue Sep 01 21:37:45.264174 2026] [:error] [pid 28500:tid 140353332037376] [client 20.104.49.130:38666] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminfus.php"] [unique_id "apeL-TQYUm0S3Gh9Jn97MQAAAYY"]
[Tue Sep 01 21:37:45.463428 2026] [:error] [pid 28500:tid 140353264895744] [client 20.104.49.130:38716] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sale.php"] [unique_id "apeL-TQYUm0S3Gh9Jn97MgAAAY4"]
[Tue Sep 01 21:37:45.670865 2026] [:error] [pid 11529:tid 140353443960576] [client 20.104.49.130:38718] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mcebraed.php"] [unique_id "apeL-S580fjDz1VV6ychKgAAAcE"]
[Tue Sep 01 21:37:45.885153 2026] [:error] [pid 6090:tid 140353332037376] [client 20.104.49.130:38695] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/retu11.PhP"] [unique_id "apeL-bPf1VxWhFqgvWtlWgAAAEY"]
[Tue Sep 01 21:37:46.125265 2026] [:error] [pid 6091:tid 140353180968704] [client 20.104.49.130:38686] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/w.php"] [unique_id "apeL-skVYOXruxV21N5z-wAAAJg"]
[Tue Sep 01 21:37:46.330878 2026] [:error] [pid 29730:tid 140353435567872] [client 20.104.49.130:38291] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/paypal.php"] [unique_id "apeL-kKKsXadAWpiFbszjAAAAkI"]
[Tue Sep 01 21:37:46.543859 2026] [:error] [pid 11529:tid 140353180968704] [client 20.104.49.130:38685] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/man.php"] [unique_id "apeL-i580fjDz1VV6ychKwAAAdg"]
[Tue Sep 01 21:37:46.753064 2026] [:error] [pid 6089:tid 140353306859264] [client 20.104.49.130:38671] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/conf.php"] [unique_id "apeL-pjeM2TaVrIYSc-V2QAAAAk"]
[Tue Sep 01 21:37:46.987606 2026] [:error] [pid 6091:tid 140353189361408] [client 20.104.49.130:38384] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/db.php"] [unique_id "apeL-skVYOXruxV21N5z_AAAAJc"]
[Tue Sep 01 21:37:54.587981 2026] [:error] [pid 6091:tid 140353231324928] [client 20.104.49.130:38278] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ffile.php"] [unique_id "apeMAskVYOXruxV21N5z_gAAAJI"]
[Tue Sep 01 21:37:54.788225 2026] [:error] [pid 6411:tid 140353348822784] [client 20.104.49.130:38364] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ff123.php"] [unique_id "apeMAq-5XxGfLhlq8xmFZQAAAMQ"]
[Tue Sep 01 21:37:55.008300 2026] [:error] [pid 28194:tid 140353273288448] [client 20.104.49.130:38688] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a.php"] [unique_id "apeMAwdz-EN0cDNAEVKb8wAAAU0"]
[Tue Sep 01 21:37:55.215268 2026] [:error] [pid 6091:tid 140353357215488] [client 20.104.49.130:38348] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/acces.php"] [unique_id "apeMA8kVYOXruxV21N50AAAAAIM"]
[Tue Sep 01 21:37:55.417287 2026] [:error] [pid 6089:tid 140353298466560] [client 20.104.49.130:38333] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/Sanskrit.php"] [unique_id "apeMA5jeM2TaVrIYSc-V2gAAAAo"]
[Tue Sep 01 21:37:55.637060 2026] [:error] [pid 9194:tid 140353197754112] [client 20.104.49.130:38298] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/133.php"] [unique_id "apeMA4dqWCmIAB5WEG_H5gAAARY"]
[Tue Sep 01 21:37:55.858015 2026] [:error] [pid 11529:tid 140353452353280] [client 20.104.49.130:38706] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/reune.php"] [unique_id "apeMAy580fjDz1VV6ychLQAAAcA"]
[Tue Sep 01 21:37:56.075411 2026] [:error] [pid 9194:tid 140353315251968] [client 20.104.49.130:38672] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pol.php"] [unique_id "apeMBIdqWCmIAB5WEG_H6AAAAQg"]
[Tue Sep 01 21:37:56.323976 2026] [:error] [pid 6091:tid 140353281681152] [client 20.104.49.130:38360] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo2.php"] [unique_id "apeMBMkVYOXruxV21N50AQAAAIw"]
[Tue Sep 01 21:37:56.526197 2026] [:error] [pid 6090:tid 140353197754112] [client 20.104.49.130:38708] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/BDKR28WP.php"] [unique_id "apeMBLPf1VxWhFqgvWtlXAAAAFY"]
[Tue Sep 01 21:37:56.730513 2026] [:error] [pid 29730:tid 140353248110336] [client 20.104.49.130:38377] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jlex.php"] [unique_id "apeMBEKKsXadAWpiFbszjQAAAlA"]
[Tue Sep 01 21:37:56.939775 2026] [:error] [pid 6091:tid 140353332037376] [client 20.104.49.130:38337] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/v.php"] [unique_id "apeMBMkVYOXruxV21N50AwAAAIY"]
[Tue Sep 01 21:37:57.147839 2026] [:error] [pid 6089:tid 140353340430080] [client 20.104.49.130:38355] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dejavu.php"] [unique_id "apeMBZjeM2TaVrIYSc-V2wAAAAU"]
[Tue Sep 01 21:37:57.362987 2026] [:error] [pid 6089:tid 140353180968704] [client 20.104.49.130:38343] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ey5.php"] [unique_id "apeMBZjeM2TaVrIYSc-V3AAAABg"]
[Tue Sep 01 21:37:57.569196 2026] [:error] [pid 6411:tid 140353214539520] [client 20.104.49.130:38299] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/app.php"] [unique_id "apeMBa-5XxGfLhlq8xmFZgAAANQ"]
[Tue Sep 01 21:37:57.773804 2026] [:error] [pid 6411:tid 140353256503040] [client 20.104.49.130:38362] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/shell.php"] [unique_id "apeMBa-5XxGfLhlq8xmFaAAAAM8"]
[Tue Sep 01 21:37:57.977030 2026] [:error] [pid 6411:tid 140353239717632] [client 20.104.49.130:38325] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aa.php"] [unique_id "apeMBa-5XxGfLhlq8xmFaQAAANE"]
[Tue Sep 01 21:37:58.202990 2026] [:error] [pid 6089:tid 140353315251968] [client 20.104.49.130:38660] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/diidi.php"] [unique_id "apeMBpjeM2TaVrIYSc-V3gAAAAg"]
[Tue Sep 01 21:37:58.419260 2026] [:error] [pid 6089:tid 140353273288448] [client 20.104.49.130:38390] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php.php"] [unique_id "apeMBpjeM2TaVrIYSc-V3wAAAA0"]
[Tue Sep 01 21:37:58.621599 2026] [:error] [pid 6091:tid 140353197754112] [client 20.104.49.130:38366] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/browse.php"] [unique_id "apeMBskVYOXruxV21N50BAAAAJY"]
[Tue Sep 01 21:37:58.823095 2026] [:error] [pid 6089:tid 140353264895744] [client 20.104.49.130:38287] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pepe.php"] [unique_id "apeMBpjeM2TaVrIYSc-V4AAAAA4"]
[Tue Sep 01 21:37:59.027379 2026] [:error] [pid 6091:tid 140353315251968] [client 20.104.49.130:38668] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/babu.php"] [unique_id "apeMB8kVYOXruxV21N50BQAAAIg"]
[Tue Sep 01 21:37:59.269925 2026] [:error] [pid 28194:tid 140353248110336] [client 20.104.49.130:38356] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/b.php"] [unique_id "apeMBwdz-EN0cDNAEVKb9QAAAVA"]
[Tue Sep 01 21:37:59.473562 2026] [:error] [pid 9194:tid 140353248110336] [client 20.104.49.130:38277] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/d2.php"] [unique_id "apeMB4dqWCmIAB5WEG_H6QAAARA"]
[Tue Sep 01 21:37:59.683396 2026] [:error] [pid 28500:tid 140353435567872] [client 20.104.49.130:38311] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/makeasmtp.php"] [unique_id "apeMBzQYUm0S3Gh9Jn97NgAAAYI"]
[Tue Sep 01 21:37:59.906048 2026] [:error] [pid 6090:tid 140353290073856] [client 20.104.49.130:38396] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/d12.php"] [unique_id "apeMB7Pf1VxWhFqgvWtlXgAAAEs"]
[Tue Sep 01 21:38:00.119230 2026] [:error] [pid 28194:tid 140353214539520] [client 20.104.49.130:38804] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/palsy.php"] [unique_id "apeMCAdz-EN0cDNAEVKb9gAAAVQ"]
[Tue Sep 01 21:38:00.348204 2026] [:error] [pid 28194:tid 140353256503040] [client 20.104.49.130:38397] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/Njima.php"] [unique_id "apeMCAdz-EN0cDNAEVKb9wAAAU8"]
[Tue Sep 01 21:38:00.570032 2026] [:error] [pid 28194:tid 140353290073856] [client 20.104.49.130:38288] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ms-users.php"] [unique_id "apeMCAdz-EN0cDNAEVKb-AAAAUs"]
[Tue Sep 01 21:38:00.844045 2026] [:error] [pid 6411:tid 140353197754112] [client 20.104.49.130:38354] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/7.php"] [unique_id "apeMCK-5XxGfLhlq8xmFagAAANY"]
[Tue Sep 01 21:38:01.058524 2026] [:error] [pid 6411:tid 140353323644672] [client 20.104.49.130:38712] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file25.php"] [unique_id "apeMCa-5XxGfLhlq8xmFawAAAMc"]
[Tue Sep 01 21:38:01.277206 2026] [:error] [pid 28194:tid 140353222932224] [client 20.104.49.130:38395] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/geju.php"] [unique_id "apeMCQdz-EN0cDNAEVKb-QAAAVM"]
[Tue Sep 01 21:38:01.483427 2026] [:error] [pid 6091:tid 140353180968704] [client 20.104.49.130:38341] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mailchimp.php"] [unique_id "apeMCckVYOXruxV21N50BgAAAJg"]
[Tue Sep 01 21:38:01.689966 2026] [:error] [pid 6091:tid 140353264895744] [client 20.104.49.130:38800] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bnm.php"] [unique_id "apeMCckVYOXruxV21N50BwAAAI4"]
[Tue Sep 01 21:38:01.894211 2026] [:error] [pid 6091:tid 140353206146816] [client 20.104.49.130:38701] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/indo.php"] [unique_id "apeMCckVYOXruxV21N50CAAAAJU"]
[Tue Sep 01 21:38:02.107791 2026] [:error] [pid 6091:tid 140353348822784] [client 20.104.49.130:38667] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/faq.php"] [unique_id "apeMCskVYOXruxV21N50CQAAAIQ"]
[Tue Sep 01 21:38:09.746697 2026] [:error] [pid 29730:tid 140353315251968] [client 20.104.49.130:38303] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gecko-new.php"] [unique_id "apeMEUKKsXadAWpiFbszjgAAAkg"]
[Tue Sep 01 21:38:09.947923 2026] [:error] [pid 29730:tid 140353443960576] [client 20.104.49.130:38687] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/1.php"] [unique_id "apeMEUKKsXadAWpiFbszjwAAAkE"]
[Tue Sep 01 21:38:10.153530 2026] [:error] [pid 9194:tid 140353273288448] [client 20.104.49.130:38710] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lx.php"] [unique_id "apeMEodqWCmIAB5WEG_H6gAAAQ0"]
[Tue Sep 01 21:38:10.362698 2026] [:error] [pid 6090:tid 140353248110336] [client 20.104.49.130:38339] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/payment.php"] [unique_id "apeMErPf1VxWhFqgvWtlYAAAAFA"]
[Tue Sep 01 21:38:10.574692 2026] [:error] [pid 28194:tid 140353206146816] [client 20.104.49.130:38382] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hanna1337.php"] [unique_id "apeMEgdz-EN0cDNAEVKb-wAAAVU"]
[Tue Sep 01 21:38:10.791503 2026] [:error] [pid 28194:tid 140353264895744] [client 20.104.49.130:38794] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cu.php"] [unique_id "apeMEgdz-EN0cDNAEVKb_AAAAU4"]
[Tue Sep 01 21:38:11.018138 2026] [:error] [pid 28194:tid 140353197754112] [client 20.104.49.130:38705] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gk.php"] [unique_id "apeMEwdz-EN0cDNAEVKb_wAAAVY"]
[Tue Sep 01 21:38:11.252110 2026] [:error] [pid 28500:tid 140353222932224] [client 20.104.49.130:38700] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/site2.php"] [unique_id "apeMEzQYUm0S3Gh9Jn97NwAAAZM"]
[Tue Sep 01 21:38:11.460477 2026] [:error] [pid 6089:tid 140353315251968] [client 20.104.49.130:38272] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ecvvhlei.php"] [unique_id "apeME5jeM2TaVrIYSc-V6QAAAAg"]
[Tue Sep 01 21:38:11.694323 2026] [:error] [pid 29615:tid 140353214539520] [client 20.104.49.130:38300] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/reop3.php"] [unique_id "apeME51PBa8fnDJM-t4aGgAAAhQ"]
[Tue Sep 01 21:38:11.937092 2026] [:error] [pid 6090:tid 140353357215488] [client 20.104.49.130:38811] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/special.php"] [unique_id "apeME7Pf1VxWhFqgvWtlYQAAAEM"]
[Tue Sep 01 21:38:12.187617 2026] [:error] [pid 6090:tid 140353180968704] [client 20.104.49.130:38664] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/arig.php"] [unique_id "apeMFLPf1VxWhFqgvWtlYgAAAFg"]
[Tue Sep 01 21:38:12.409922 2026] [:error] [pid 29730:tid 140353452353280] [client 20.104.49.130:38340] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phprelease.php"] [unique_id "apeMFEKKsXadAWpiFbszkAAAAkA"]
[Tue Sep 01 21:38:12.624683 2026] [:error] [pid 28194:tid 140353248110336] [client 20.104.49.130:38658] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/SDsadqwrf.php"] [unique_id "apeMFAdz-EN0cDNAEVKcAQAAAVA"]
[Tue Sep 01 21:38:12.829221 2026] [:error] [pid 9194:tid 140353306859264] [client 20.104.49.130:38283] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/acp.php"] [unique_id "apeMFIdqWCmIAB5WEG_H6wAAAQk"]
[Tue Sep 01 21:38:13.030280 2026] [:error] [pid 29615:tid 140353281681152] [client 20.104.49.130:38387] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aafewc0k.php"] [unique_id "apeMFZ1PBa8fnDJM-t4aGwAAAgw"]
[Tue Sep 01 21:38:13.267885 2026] [:error] [pid 6091:tid 140353306859264] [client 20.104.49.130:38282] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/berlin.php"] [unique_id "apeMFckVYOXruxV21N50DgAAAIk"]
[Tue Sep 01 21:38:13.469714 2026] [:error] [pid 6411:tid 140353222932224] [client 20.104.49.130:38826] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/9.php"] [unique_id "apeMFa-5XxGfLhlq8xmFbAAAANM"]
[Tue Sep 01 21:38:13.681323 2026] [:error] [pid 6091:tid 140353197754112] [client 20.104.49.130:38381] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/3.php"] [unique_id "apeMFckVYOXruxV21N50DwAAAJY"]
[Tue Sep 01 22:04:27.986234 2026] [:error] [pid 6411:tid 140353264895744] [client 4.205.62.107:46079] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apeSO6-5XxGfLhlq8xmHIgAAAM4"]
[Tue Sep 01 22:04:29.314236 2026] [:error] [pid 6089:tid 140353357215488] [client 4.205.62.107:46026] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apeSPZjeM2TaVrIYSc-bXwAAAAM"]
[Tue Sep 01 22:04:30.579503 2026] [:error] [pid 6091:tid 140353189361408] [client 4.205.62.107:45265] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bb.php"] [unique_id "apeSPskVYOXruxV21N57BQAAAJc"]
[Tue Sep 01 22:04:31.883572 2026] [:error] [pid 6091:tid 140353197754112] [client 4.205.62.107:46045] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/params.php"] [unique_id "apeSP8kVYOXruxV21N57BwAAAJY"]
[Tue Sep 01 22:04:33.094712 2026] [:error] [pid 28194:tid 140353231324928] [client 4.205.62.107:46070] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/setup-config.php"] [unique_id "apeSQQdz-EN0cDNAEVKgHAAAAVI"]
[Tue Sep 01 22:04:34.328246 2026] [:error] [pid 6091:tid 140353222932224] [client 4.205.62.107:46056] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo01.php"] [unique_id "apeSQskVYOXruxV21N57CwAAAJM"]
[Tue Sep 01 22:04:35.532511 2026] [:error] [pid 6090:tid 140353323644672] [client 4.205.62.107:46062] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/product.php"] [unique_id "apeSQ7Pf1VxWhFqgvWtnpAAAAEc"]
[Tue Sep 01 22:04:36.774770 2026] [:error] [pid 6090:tid 140353348822784] [client 4.205.62.107:45254] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/test.config.php"] [unique_id "apeSRLPf1VxWhFqgvWtnpgAAAEQ"]
[Tue Sep 01 22:04:38.059315 2026] [:error] [pid 28500:tid 140353231324928] [client 4.205.62.107:45273] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpversion.php"] [unique_id "apeSRjQYUm0S3Gh9Jn99ZgAAAZI"]
[Tue Sep 01 22:04:39.302571 2026] [:error] [pid 6090:tid 140353264895744] [client 4.205.62.107:46060] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gk.php"] [unique_id "apeSR7Pf1VxWhFqgvWtnqQAAAE4"]
[Tue Sep 01 22:04:40.531258 2026] [:error] [pid 29730:tid 140353189361408] [client 4.205.62.107:45260] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/w.php"] [unique_id "apeSSEKKsXadAWpiFbs1BAAAAlc"]
[Tue Sep 01 22:04:41.752904 2026] [:error] [pid 6089:tid 140353180968704] [client 4.205.62.107:46044] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/update.php"] [unique_id "apeSSZjeM2TaVrIYSc-bZQAAABg"]
[Tue Sep 01 22:04:43.270847 2026] [:error] [pid 6089:tid 140353348822784] [client 4.205.62.107:46021] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/h.php"] [unique_id "apeSS5jeM2TaVrIYSc-bZgAAAAQ"]
[Tue Sep 01 22:04:44.501731 2026] [:error] [pid 6089:tid 140353189361408] [client 4.205.62.107:45253] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aws_sdk_settings.php"] [unique_id "apeSTJjeM2TaVrIYSc-baQAAABc"]
[Tue Sep 01 22:04:45.924269 2026] [:error] [pid 28194:tid 140353290073856] [client 4.205.62.107:45266] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/css.php"] [unique_id "apeSTQdz-EN0cDNAEVKgIAAAAUs"]
[Tue Sep 01 22:04:47.147043 2026] [:error] [pid 29730:tid 140353298466560] [client 4.205.62.107:45280] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/i.php"] [unique_id "apeST0KKsXadAWpiFbs1BgAAAko"]
[Tue Sep 01 22:04:48.372915 2026] [:error] [pid 9194:tid 140353281681152] [client 4.205.62.107:46039] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/doc.php"] [unique_id "apeSUIdqWCmIAB5WEG_KwgAAAQw"]
[Tue Sep 01 22:04:49.706601 2026] [:error] [pid 6091:tid 140353332037376] [client 4.205.62.107:45269] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/G-in.php"] [unique_id "apeSUckVYOXruxV21N57EwAAAIY"]
[Tue Sep 01 22:04:50.922370 2026] [:error] [pid 6091:tid 140353222932224] [client 4.205.62.107:46066] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ms.php"] [unique_id "apeSUskVYOXruxV21N57FAAAAJM"]
[Tue Sep 01 22:04:52.141836 2026] [:error] [pid 6089:tid 140353340430080] [client 4.205.62.107:46053] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/channels.php"] [unique_id "apeSVJjeM2TaVrIYSc-bbwAAAAU"]
[Tue Sep 01 22:04:53.360139 2026] [:error] [pid 6089:tid 140353180968704] [client 4.205.62.107:46059] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/sc.php"] [unique_id "apeSVZjeM2TaVrIYSc-bcAAAABg"]
[Tue Sep 01 22:04:54.580009 2026] [:error] [pid 6089:tid 140353348822784] [client 4.205.62.107:45295] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/asa.php"] [unique_id "apeSVpjeM2TaVrIYSc-bcgAAAAQ"]
[Tue Sep 01 22:04:55.820197 2026] [:error] [pid 6411:tid 140353239717632] [client 4.205.62.107:45271] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/broadcasting.php"] [unique_id "apeSV6-5XxGfLhlq8xmHJQAAANE"]
[Tue Sep 01 22:04:57.028019 2026] [:error] [pid 29615:tid 140353206146816] [client 4.205.62.107:46076] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/god.php"] [unique_id "apeSWZ1PBa8fnDJM-t4b5AAAAhU"]
[Tue Sep 01 22:04:58.248076 2026] [:error] [pid 9194:tid 140353214539520] [client 4.205.62.107:45267] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/config/laravolt/css/index.php"] [unique_id "apeSWodqWCmIAB5WEG_KwwAAARQ"]
[Tue Sep 01 22:04:59.452164 2026] [:error] [pid 9194:tid 140353197754112] [client 4.205.62.107:46074] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/06.php"] [unique_id "apeSW4dqWCmIAB5WEG_KxAAAARY"]
[Tue Sep 01 22:05:00.663800 2026] [:error] [pid 6089:tid 140353222932224] [client 4.205.62.107:46049] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aws_config.php"] [unique_id "apeSXJjeM2TaVrIYSc-bewAAABM"]
[Tue Sep 01 22:05:01.868914 2026] [:error] [pid 11529:tid 140353180968704] [client 4.205.62.107:45919] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phina.php"] [unique_id "apeSXS580fjDz1VV6ycksgAAAdg"]
[Tue Sep 01 22:05:03.172689 2026] [:error] [pid 29615:tid 140353264895744] [client 4.205.62.107:45899] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/66.php"] [unique_id "apeSX51PBa8fnDJM-t4b5gAAAg4"]
[Tue Sep 01 22:05:04.402455 2026] [:error] [pid 28194:tid 140353222932224] [client 4.205.62.107:46078] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/localconf.php"] [unique_id "apeSYAdz-EN0cDNAEVKgJAAAAVM"]
[Tue Sep 01 22:05:07.668584 2026] [:error] [pid 29615:tid 140353197754112] [client 4.205.62.107:46042] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cli_bootstrap.php"] [unique_id "apeSY51PBa8fnDJM-t4b5wAAAhY"]
[Tue Sep 01 22:05:08.955218 2026] [:error] [pid 6089:tid 140353435567872] [client 4.205.62.107:45285] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dialog.php"] [unique_id "apeSZJjeM2TaVrIYSc-bfQAAAAI"]
[Tue Sep 01 22:05:10.179736 2026] [:error] [pid 6089:tid 140353214539520] [client 4.205.62.107:45915] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apeSZpjeM2TaVrIYSc-bfgAAABQ"]
[Tue Sep 01 22:05:11.389004 2026] [:error] [pid 28500:tid 140353222932224] [client 4.205.62.107:45935] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/error_log.php"] [unique_id "apeSZzQYUm0S3Gh9Jn99bAAAAZM"]
[Tue Sep 01 22:05:12.909281 2026] [:error] [pid 6089:tid 140353290073856] [client 4.205.62.107:45282] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bengi.php"] [unique_id "apeSaJjeM2TaVrIYSc-bgQAAAAs"]
[Tue Sep 01 22:05:14.161283 2026] [:error] [pid 6089:tid 140353281681152] [client 4.205.62.107:45892] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a1vx.php"] [unique_id "apeSapjeM2TaVrIYSc-bgwAAAAw"]
[Tue Sep 01 22:05:15.596881 2026] [:error] [pid 6411:tid 140353248110336] [client 4.205.62.107:46017] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/konfig.php"] [unique_id "apeSa6-5XxGfLhlq8xmHKQAAANA"]
[Tue Sep 01 22:05:16.951295 2026] [:error] [pid 28194:tid 140353298466560] [client 4.205.62.107:46018] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xqq.php"] [unique_id "apeSbAdz-EN0cDNAEVKgKAAAAUo"]
[Tue Sep 01 22:05:18.192753 2026] [:error] [pid 28194:tid 140353214539520] [client 4.205.62.107:45258] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aws-credentials.php"] [unique_id "apeSbgdz-EN0cDNAEVKgMQAAAVQ"]
[Tue Sep 01 22:05:19.509584 2026] [:error] [pid 6089:tid 140353357215488] [client 4.205.62.107:45264] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wpver.php"] [unique_id "apeSb5jeM2TaVrIYSc-bnQAAAAM"]
[Tue Sep 01 22:05:20.739102 2026] [:error] [pid 29615:tid 140353340430080] [client 4.205.62.107:46037] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin.php"] [unique_id "apeScJ1PBa8fnDJM-t4b6wAAAgU"]
[Tue Sep 01 22:05:22.027572 2026] [:error] [pid 29730:tid 140353231324928] [client 4.205.62.107:46068] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/paths.php"] [unique_id "apeSckKKsXadAWpiFbs1GwAAAlI"]
[Tue Sep 01 22:05:23.396256 2026] [:error] [pid 11529:tid 140353206146816] [client 4.205.62.107:45263] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-konfig.backup.php"] [unique_id "apeScy580fjDz1VV6yckywAAAdU"]
[Tue Sep 01 22:05:24.953710 2026] [:error] [pid 28194:tid 140353197754112] [client 4.205.62.107:46069] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/motu.php"] [unique_id "apeSdAdz-EN0cDNAEVKgQwAAAVY"]
[Tue Sep 01 22:05:26.267155 2026] [:error] [pid 28500:tid 140353452353280] [client 4.205.62.107:46064] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/var/www/wallet/index.php"] [unique_id "apeSdjQYUm0S3Gh9Jn99cwAAAYA"]
[Tue Sep 01 22:05:27.808205 2026] [:error] [pid 29730:tid 140353256503040] [client 4.205.62.107:45275] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xza.php"] [unique_id "apeSd0KKsXadAWpiFbs1HQAAAk8"]
[Tue Sep 01 22:05:29.817074 2026] [:error] [pid 6091:tid 140353197754112] [client 4.205.62.107:45294] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/doc.php"] [unique_id "apeSeckVYOXruxV21N57OgAAAJY"]
[Tue Sep 01 22:05:31.293883 2026] [:error] [pid 11529:tid 140353281681152] [client 4.205.62.107:45894] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cu.php"] [unique_id "apeSey580fjDz1VV6yckzgAAAcw"]
[Tue Sep 01 22:05:36.513258 2026] [:error] [pid 6091:tid 140353298466560] [client 4.205.62.107:46038] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/groceries/index.php"] [unique_id "apeSgMkVYOXruxV21N57QAAAAIo"]
[Tue Sep 01 22:05:46.592465 2026] [:error] [pid 6091:tid 140353231324928] [client 4.205.62.107:46061] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-config.backup.php"] [unique_id "apeSiskVYOXruxV21N57SgAAAJI"]
[Tue Sep 01 22:05:47.810164 2026] [:error] [pid 6411:tid 140353256503040] [client 4.205.62.107:46052] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/app.default.php"] [unique_id "apeSi6-5XxGfLhlq8xmHMwAAAM8"]
[Tue Sep 01 22:05:49.127971 2026] [:error] [pid 11529:tid 140353256503040] [client 4.205.62.107:46043] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/database.php"] [unique_id "apeSjS580fjDz1VV6yck0QAAAc8"]
[Tue Sep 01 22:05:50.341260 2026] [:error] [pid 6090:tid 140353340430080] [client 4.205.62.107:46034] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-blog.php"] [unique_id "apeSjrPf1VxWhFqgvWtnuwAAAEU"]
[Tue Sep 01 22:05:51.703903 2026] [:error] [pid 6411:tid 140353306859264] [client 4.205.62.107:45900] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/apikeys.php"] [unique_id "apeSj6-5XxGfLhlq8xmHNAAAAMk"]
[Tue Sep 01 22:05:52.956878 2026] [:error] [pid 6089:tid 140353248110336] [client 4.205.62.107:45252] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-class.php"] [unique_id "apeSkJjeM2TaVrIYSc-b1gAAABA"]
[Tue Sep 01 22:05:54.188791 2026] [:error] [pid 29730:tid 140353197754112] [client 4.205.62.107:45929] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/agg.php"] [unique_id "apeSkkKKsXadAWpiFbs1IwAAAlY"]
[Tue Sep 01 22:05:55.417159 2026] [:error] [pid 6090:tid 140353222932224] [client 4.205.62.107:46067] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/environment.php"] [unique_id "apeSk7Pf1VxWhFqgvWtnvgAAAFM"]
[Tue Sep 01 22:05:56.824775 2026] [:error] [pid 28500:tid 140353239717632] [client 4.205.62.107:45261] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/register.php"] [unique_id "apeSlDQYUm0S3Gh9Jn99eQAAAZE"]
[Tue Sep 01 22:05:58.050953 2026] [:error] [pid 11529:tid 140353264895744] [client 4.205.62.107:46065] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/autogooey.php"] [unique_id "apeSli580fjDz1VV6yck1QAAAc4"]
[Tue Sep 01 22:05:59.268830 2026] [:error] [pid 6091:tid 140353189361408] [client 4.205.62.107:46016] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/log.php"] [unique_id "apeSl8kVYOXruxV21N57UwAAAJc"]
[Tue Sep 01 22:06:04.886381 2026] [proxy_fcgi:error] [pid 28194:tid 140353264895744] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:05.031313 2026] [proxy_fcgi:error] [pid 28194:tid 140353340430080] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:05.281716 2026] [proxy_fcgi:error] [pid 28194:tid 140353231324928] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:05.418417 2026] [proxy_fcgi:error] [pid 28194:tid 140353298466560] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:05.560256 2026] [proxy_fcgi:error] [pid 28194:tid 140353332037376] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:05.666428 2026] [proxy_fcgi:error] [pid 28194:tid 140353189361408] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:05.872114 2026] [proxy_fcgi:error] [pid 28194:tid 140353357215488] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:05.979353 2026] [proxy_fcgi:error] [pid 28194:tid 140353348822784] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:06.098502 2026] [proxy_fcgi:error] [pid 28194:tid 140353323644672] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:06.207537 2026] [proxy_fcgi:error] [pid 28194:tid 140353239717632] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:06.479994 2026] [proxy_fcgi:error] [pid 28194:tid 140353435567872] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:06.586683 2026] [proxy_fcgi:error] [pid 28194:tid 140353290073856] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:06.821906 2026] [proxy_fcgi:error] [pid 28194:tid 140353214539520] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:07.351800 2026] [proxy_fcgi:error] [pid 28194:tid 140353248110336] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:08.065828 2026] [proxy_fcgi:error] [pid 28194:tid 140353306859264] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:08.251991 2026] [proxy_fcgi:error] [pid 28194:tid 140353206146816] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:08.780697 2026] [proxy_fcgi:error] [pid 28194:tid 140353273288448] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:09.263512 2026] [proxy_fcgi:error] [pid 28194:tid 140353452353280] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:09.680391 2026] [proxy_fcgi:error] [pid 28194:tid 140353281681152] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:15.642925 2026] [proxy_fcgi:error] [pid 28194:tid 140353315251968] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:15.825133 2026] [proxy_fcgi:error] [pid 28194:tid 140353222932224] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:16.004682 2026] [proxy_fcgi:error] [pid 28194:tid 140353180968704] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:16.112732 2026] [proxy_fcgi:error] [pid 28194:tid 140353264895744] [client 4.205.62.107:46031] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:06:16.112853 2026] [:error] [pid 28194:tid 140353264895744] [client 4.205.62.107:46031] [client 4.205.62.107] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/pouhg.php"] [unique_id "apeSqAdz-EN0cDNAEVKgawAAAU4"]
[Tue Sep 01 22:06:16.243884 2026] [:error] [pid 28194:tid 140353340430080] [client 4.205.62.107:46031] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/txets.php"] [unique_id "apeSqAdz-EN0cDNAEVKgbAAAAUU"]
[Tue Sep 01 22:06:17.573840 2026] [:error] [pid 28194:tid 140353298466560] [client 4.205.62.107:46047] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/333.php"] [unique_id "apeSqQdz-EN0cDNAEVKgbQAAAUo"]
[Tue Sep 01 22:06:18.911798 2026] [:error] [pid 6090:tid 140353214539520] [client 4.205.62.107:45889] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/api.php"] [unique_id "apeSqrPf1VxWhFqgvWtnxQAAAFQ"]
[Tue Sep 01 22:06:20.161227 2026] [:error] [pid 6411:tid 140353231324928] [client 4.205.62.107:46075] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/classsmtps.php"] [unique_id "apeSrK-5XxGfLhlq8xmHOwAAANI"]
[Tue Sep 01 22:06:21.441461 2026] [:error] [pid 6091:tid 140353214539520] [client 4.205.62.107:45888] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xve22.php"] [unique_id "apeSrckVYOXruxV21N57bwAAAJQ"]
[Tue Sep 01 22:06:22.849187 2026] [:error] [pid 9194:tid 140353323644672] [client 4.205.62.107:45255] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/guk.php"] [unique_id "apeSrodqWCmIAB5WEG_K6AAAAQc"]
[Tue Sep 01 22:06:24.272033 2026] [:error] [pid 29615:tid 140353214539520] [client 4.205.62.107:46071] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws61.php"] [unique_id "apeSsJ1PBa8fnDJM-t4b9wAAAhQ"]
[Tue Sep 01 22:06:27.225294 2026] [:error] [pid 6091:tid 140353290073856] [client 4.205.62.107:45259] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/test.php"] [unique_id "apeSs8kVYOXruxV21N57dAAAAIs"]
[Tue Sep 01 22:06:29.316346 2026] [:error] [pid 28500:tid 140353206146816] [client 4.205.62.107:45287] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aws_settings.php"] [unique_id "apeStTQYUm0S3Gh9Jn99hwAAAZU"]
[Tue Sep 01 22:06:33.423285 2026] [:error] [pid 29730:tid 140353315251968] [client 4.205.62.107:46041] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/old_phpinfo.php"] [unique_id "apeSuUKKsXadAWpiFbs1KQAAAkg"]
[Tue Sep 01 22:06:35.014439 2026] [:error] [pid 11529:tid 140353264895744] [client 4.205.62.107:46057] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/otuz1.php"] [unique_id "apeSuy580fjDz1VV6yck9gAAAc4"]
[Tue Sep 01 22:06:36.801435 2026] [:error] [pid 6091:tid 140353348822784] [client 4.205.62.107:46072] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/time.php"] [unique_id "apeSvMkVYOXruxV21N57dgAAAIQ"]
[Tue Sep 01 22:06:39.025944 2026] [:error] [pid 9194:tid 140353332037376] [client 4.205.62.107:45931] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ah25.php"] [unique_id "apeSv4dqWCmIAB5WEG_K6gAAAQY"]
[Tue Sep 01 22:06:40.534805 2026] [:error] [pid 29730:tid 140353197754112] [client 4.205.62.107:45251] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xin1.php"] [unique_id "apeSwEKKsXadAWpiFbs1KwAAAlY"]
[Tue Sep 01 22:06:42.067623 2026] [:error] [pid 6089:tid 140353197754112] [client 4.205.62.107:46032] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpi.php"] [unique_id "apeSwpjeM2TaVrIYSc-cJgAAABY"]
[Tue Sep 01 22:06:43.927197 2026] [:error] [pid 6089:tid 140353357215488] [client 4.205.62.107:45256] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hosty.php"] [unique_id "apeSw5jeM2TaVrIYSc-cKAAAAAM"]
[Tue Sep 01 22:06:48.523714 2026] [:error] [pid 6089:tid 140353222932224] [client 4.205.62.107:45909] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/atex1.php"] [unique_id "apeSyJjeM2TaVrIYSc-cKQAAABM"]
[Tue Sep 01 22:06:51.625089 2026] [:error] [pid 29730:tid 140353214539520] [client 4.205.62.107:45286] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php-details.php"] [unique_id "apeSy0KKsXadAWpiFbs1LQAAAlQ"]
[Tue Sep 01 22:06:53.650460 2026] [:error] [pid 29615:tid 140353231324928] [client 4.205.62.107:46063] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/config_dev.php"] [unique_id "apeSzZ1PBa8fnDJM-t4b_gAAAhI"]
[Tue Sep 01 22:06:55.600185 2026] [:error] [pid 29730:tid 140353264895744] [client 4.205.62.107:46024] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/vx.php"] [unique_id "apeSz0KKsXadAWpiFbs1LgAAAk4"]
[Tue Sep 01 22:06:57.295324 2026] [:error] [pid 6091:tid 140353306859264] [client 4.205.62.107:45928] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lala.php"] [unique_id "apeS0ckVYOXruxV21N57eQAAAIk"]
[Tue Sep 01 22:06:59.081191 2026] [:error] [pid 6090:tid 140353222932224] [client 4.205.62.107:45288] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pinfo.php"] [unique_id "apeS07Pf1VxWhFqgvWtn9AAAAFM"]
[Tue Sep 01 22:07:00.400055 2026] [:error] [pid 11529:tid 140353214539520] [client 4.205.62.107:46022] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/edit.php"] [unique_id "apeS1C580fjDz1VV6yck_AAAAdQ"]
[Tue Sep 01 22:07:02.448124 2026] [:error] [pid 6089:tid 140353340430080] [client 4.205.62.107:45250] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/debuggen.php"] [unique_id "apeS1pjeM2TaVrIYSc-cLAAAAAU"]
[Tue Sep 01 22:07:04.766688 2026] [:error] [pid 9194:tid 140353281681152] [client 4.205.62.107:46054] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-act.php"] [unique_id "apeS2IdqWCmIAB5WEG_K7gAAAQw"]
[Tue Sep 01 22:07:06.201371 2026] [:error] [pid 6091:tid 140353357215488] [client 4.205.62.107:45277] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/chosen.php"] [unique_id "apeS2skVYOXruxV21N57ewAAAIM"]
[Tue Sep 01 22:07:07.916380 2026] [:error] [pid 6091:tid 140353290073856] [client 4.205.62.107:45248] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public/wp-blog.php"] [unique_id "apeS28kVYOXruxV21N57fQAAAIs"]
[Tue Sep 01 22:07:09.280712 2026] [:error] [pid 6091:tid 140353197754112] [client 4.205.62.107:45296] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/queue.php"] [unique_id "apeS3ckVYOXruxV21N57fgAAAJY"]
[Tue Sep 01 22:07:11.115406 2026] [:error] [pid 6091:tid 140353239717632] [client 4.205.62.107:45298] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/btx25.php"] [unique_id "apeS38kVYOXruxV21N57fwAAAJE"]
[Tue Sep 01 22:07:12.869972 2026] [:error] [pid 29730:tid 140353306859264] [client 4.205.62.107:46020] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/goods.php"] [unique_id "apeS4EKKsXadAWpiFbs1LwAAAkk"]
[Tue Sep 01 22:07:14.136592 2026] [:error] [pid 6089:tid 140353332037376] [client 4.205.62.107:45270] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/umgebung.php"] [unique_id "apeS4pjeM2TaVrIYSc-cMgAAAAY"]
[Tue Sep 01 22:07:16.057691 2026] [:error] [pid 6411:tid 140353231324928] [client 4.205.62.107:45914] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/124.php"] [unique_id "apeS5K-5XxGfLhlq8xmHQwAAANI"]
[Tue Sep 01 22:07:17.726024 2026] [:error] [pid 29730:tid 140353452353280] [client 4.205.62.107:46033] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file59.php"] [unique_id "apeS5UKKsXadAWpiFbs1MwAAAkA"]
[Tue Sep 01 22:07:19.229177 2026] [:error] [pid 6089:tid 140353443960576] [client 4.205.62.107:45905] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/thui.php"] [unique_id "apeS55jeM2TaVrIYSc-cNQAAAAE"]
[Tue Sep 01 22:07:20.899048 2026] [:error] [pid 6091:tid 140353348822784] [client 4.205.62.107:45921] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/server-info.php"] [unique_id "apeS6MkVYOXruxV21N57ggAAAIQ"]
[Tue Sep 01 22:07:22.403565 2026] [:error] [pid 6411:tid 140353248110336] [client 4.205.62.107:45271] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws79.php"] [unique_id "apeS6q-5XxGfLhlq8xmHRAAAANA"]
[Tue Sep 01 22:07:24.150563 2026] [:error] [pid 29615:tid 140353214539520] [client 4.205.62.107:45257] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/routes.php"] [unique_id "apeS7J1PBa8fnDJM-t4cBAAAAhQ"]
[Tue Sep 01 22:07:25.520679 2026] [:error] [pid 6090:tid 140353281681152] [client 4.205.62.107:46050] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public/rip.php.php"] [unique_id "apeS7bPf1VxWhFqgvWtn_gAAAEw"]
[Tue Sep 01 22:07:26.747621 2026] [:error] [pid 6091:tid 140353256503040] [client 4.205.62.107:45289] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nlnub.php"] [unique_id "apeS7skVYOXruxV21N57hwAAAI8"]
[Tue Sep 01 22:07:28.378815 2026] [:error] [pid 28194:tid 140353290073856] [client 4.205.62.107:46055] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sys.php"] [unique_id "apeS8Adz-EN0cDNAEVKgiAAAAUs"]
[Tue Sep 01 22:07:29.709234 2026] [:error] [pid 6091:tid 140353348822784] [client 4.205.62.107:45913] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sadd.php"] [unique_id "apeS8ckVYOXruxV21N57igAAAIQ"]
[Tue Sep 01 22:07:33.342146 2026] [:error] [pid 6089:tid 140353189361408] [client 4.205.62.107:45306] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cloud.php"] [unique_id "apeS9ZjeM2TaVrIYSc-cOgAAABc"]
[Tue Sep 01 22:07:34.842996 2026] [:error] [pid 6090:tid 140353256503040] [client 4.205.62.107:45896] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-info.php"] [unique_id "apeS9rPf1VxWhFqgvWtoAAAAAE8"]
[Tue Sep 01 22:07:36.721756 2026] [:error] [pid 28194:tid 140353306859264] [client 4.205.62.107:46029] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/upload.form.php"] [unique_id "apeS-Adz-EN0cDNAEVKgiQAAAUk"]
[Tue Sep 01 22:07:43.247757 2026] [:error] [pid 29730:tid 140353306859264] [client 4.205.62.107:45939] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/png.php"] [unique_id "apeS_0KKsXadAWpiFbs1NwAAAkk"]
[Tue Sep 01 22:08:59.602830 2026] [:error] [pid 29730:tid 140353443960576] [client 4.205.62.107:46045] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/olfclass.php"] [unique_id "apeTS0KKsXadAWpiFbs1QgAAAkE"]
[Tue Sep 01 22:09:02.932938 2026] [:error] [pid 6090:tid 140353239717632] [client 4.205.62.107:45260] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/test1.php"] [unique_id "apeTTrPf1VxWhFqgvWtoNgAAAFE"]
[Tue Sep 01 22:09:04.238478 2026] [:error] [pid 6091:tid 140353197754112] [client 4.205.62.107:45254] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/drykl.php"] [unique_id "apeTUMkVYOXruxV21N57vwAAAJY"]
[Tue Sep 01 22:09:05.446987 2026] [:error] [pid 6091:tid 140353239717632] [client 4.205.62.107:46025] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ty.php"] [unique_id "apeTUckVYOXruxV21N57wAAAAJE"]
[Tue Sep 01 22:09:06.695724 2026] [:error] [pid 6091:tid 140353340430080] [client 4.205.62.107:45904] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/myfile.php"] [unique_id "apeTUskVYOXruxV21N57wQAAAIU"]
[Tue Sep 01 22:09:07.916986 2026] [:error] [pid 29615:tid 140353197754112] [client 4.205.62.107:46059] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fff.php"] [unique_id "apeTU51PBa8fnDJM-t4cDgAAAhY"]
[Tue Sep 01 22:09:09.601688 2026] [:error] [pid 28500:tid 140353348822784] [client 4.205.62.107:45265] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bootstrap.php"] [unique_id "apeTVTQYUm0S3Gh9Jn99oQAAAYQ"]
[Tue Sep 01 22:09:11.555916 2026] [:error] [pid 9194:tid 140353222932224] [client 4.205.62.107:46049] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/temp.php"] [unique_id "apeTV4dqWCmIAB5WEG_K_QAAARM"]
[Tue Sep 01 22:09:15.825937 2026] [:error] [pid 28500:tid 140353332037376] [client 4.205.62.107:45897] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/services.php"] [unique_id "apeTWzQYUm0S3Gh9Jn99ogAAAYY"]
[Tue Sep 01 22:09:20.462218 2026] [:error] [pid 6089:tid 140353206146816] [client 4.205.62.107:45842] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xda.php"] [unique_id "apeTYJjeM2TaVrIYSc-ccAAAABU"]
[Tue Sep 01 22:09:21.974163 2026] [:error] [pid 29730:tid 140353189361408] [client 4.205.62.107:45907] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/application.config.php"] [unique_id "apeTYUKKsXadAWpiFbs1RwAAAlc"]
[Tue Sep 01 22:09:23.449163 2026] [:error] [pid 6089:tid 140353239717632] [client 4.205.62.107:45925] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/oiko6u.php"] [unique_id "apeTY5jeM2TaVrIYSc-ccgAAABE"]
[Tue Sep 01 22:09:25.124564 2026] [:error] [pid 6091:tid 140353452353280] [client 4.205.62.107:45284] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/app_local.php"] [unique_id "apeTZckVYOXruxV21N57xwAAAIA"]
[Tue Sep 01 22:09:28.265079 2026] [:error] [pid 28500:tid 140353273288448] [client 4.205.62.107:45295] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bigdump.php"] [unique_id "apeTaDQYUm0S3Gh9Jn99pAAAAY0"]
[Tue Sep 01 22:09:29.600917 2026] [:error] [pid 29730:tid 140353264895744] [client 4.205.62.107:45267] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gnmlc.php"] [unique_id "apeTaUKKsXadAWpiFbs1SgAAAk4"]
[Tue Sep 01 22:09:32.324116 2026] [:error] [pid 6091:tid 140353214539520] [client 4.205.62.107:46017] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "apeTbMkVYOXruxV21N57zAAAAJQ"]
[Tue Sep 01 22:09:33.738755 2026] [:error] [pid 29615:tid 140353281681152] [client 4.205.62.107:45262] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/4563.php"] [unique_id "apeTbZ1PBa8fnDJM-t4cEAAAAgw"]
[Tue Sep 01 22:09:35.082878 2026] [:error] [pid 28194:tid 140353248110336] [client 4.205.62.107:45276] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cache-compat.php"] [unique_id "apeTbwdz-EN0cDNAEVKgnAAAAVA"]
[Tue Sep 01 22:09:36.635898 2026] [:error] [pid 6411:tid 140353248110336] [client 4.205.62.107:46078] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/app_dev.php"] [unique_id "apeTcK-5XxGfLhlq8xmHYAAAANA"]
[Tue Sep 01 22:09:38.338418 2026] [:error] [pid 6089:tid 140353231324928] [client 4.205.62.107:46058] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/plss3.php"] [unique_id "apeTcpjeM2TaVrIYSc-ceQAAABI"]
[Tue Sep 01 22:09:41.765001 2026] [:error] [pid 29730:tid 140353332037376] [client 4.205.62.107:46044] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gecko-litespeed.php"] [unique_id "apeTdUKKsXadAWpiFbs1SwAAAkY"]
[Tue Sep 01 22:09:43.063006 2026] [:error] [pid 9194:tid 140353357215488] [client 4.205.62.107:45926] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/8.php"] [unique_id "apeTd4dqWCmIAB5WEG_LAgAAAQM"]
[Tue Sep 01 22:09:44.373849 2026] [:error] [pid 6091:tid 140353443960576] [client 4.205.62.107:45305] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/thui.php"] [unique_id "apeTeMkVYOXruxV21N570AAAAIE"]
[Tue Sep 01 22:09:45.905088 2026] [:error] [pid 6091:tid 140353239717632] [client 4.205.62.107:45269] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public/mah.php.php"] [unique_id "apeTeckVYOXruxV21N570QAAAJE"]
[Tue Sep 01 22:09:47.260084 2026] [:error] [pid 29730:tid 140353206146816] [client 4.205.62.107:46021] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/u88.php"] [unique_id "apeTe0KKsXadAWpiFbs1TAAAAlU"]
[Tue Sep 01 22:09:48.475486 2026] [:error] [pid 6091:tid 140353340430080] [client 4.205.62.107:45258] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/rum.or.php"] [unique_id "apeTfMkVYOXruxV21N570gAAAIU"]
[Tue Sep 01 22:09:49.700543 2026] [:error] [pid 11529:tid 140353214539520] [client 4.205.62.107:45253] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpsysinfo.php"] [unique_id "apeTfS580fjDz1VV6yclGgAAAdQ"]
[Tue Sep 01 22:09:51.194003 2026] [:error] [pid 6089:tid 140353340430080] [client 4.205.62.107:45278] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wdf.php"] [unique_id "apeTf5jeM2TaVrIYSc-cewAAAAU"]
[Tue Sep 01 22:09:54.104851 2026] [:error] [pid 11529:tid 140353206146816] [client 4.205.62.107:46019] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/maxro.php"] [unique_id "apeTgi580fjDz1VV6yclGwAAAdU"]
[Tue Sep 01 22:09:57.974010 2026] [:error] [pid 6091:tid 140353348822784] [client 4.205.62.107:45891] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sgd.php"] [unique_id "apeThckVYOXruxV21N571wAAAIQ"]
[Tue Sep 01 22:20:53.604713 2026] [:error] [pid 28500:tid 140353332037376] [client 43.153.7.191:39704] [client 43.153.7.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apeWFTQYUm0S3Gh9Jn9-iwAAAYY"]
[Tue Sep 01 22:32:25.189616 2026] [proxy_fcgi:error] [pid 28194:tid 140353357215488] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:25.344035 2026] [proxy_fcgi:error] [pid 28194:tid 140353222932224] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:25.451855 2026] [proxy_fcgi:error] [pid 28194:tid 140353273288448] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:25.558687 2026] [proxy_fcgi:error] [pid 28194:tid 140353443960576] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:25.711276 2026] [proxy_fcgi:error] [pid 28194:tid 140353315251968] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:25.818151 2026] [proxy_fcgi:error] [pid 28194:tid 140353298466560] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:25.925295 2026] [proxy_fcgi:error] [pid 28194:tid 140353231324928] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:26.060301 2026] [proxy_fcgi:error] [pid 28194:tid 140353197754112] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:26.166728 2026] [proxy_fcgi:error] [pid 28194:tid 140353340430080] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:26.273500 2026] [proxy_fcgi:error] [pid 28194:tid 140353264895744] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:26.391452 2026] [proxy_fcgi:error] [pid 28194:tid 140353323644672] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:26.498889 2026] [proxy_fcgi:error] [pid 28194:tid 140353452353280] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:26.605905 2026] [proxy_fcgi:error] [pid 28194:tid 140353214539520] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:26.720154 2026] [proxy_fcgi:error] [pid 28194:tid 140353189361408] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:26.832102 2026] [proxy_fcgi:error] [pid 28194:tid 140353248110336] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:26.938674 2026] [proxy_fcgi:error] [pid 28194:tid 140353180968704] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:27.045274 2026] [proxy_fcgi:error] [pid 28194:tid 140353239717632] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:27.217307 2026] [proxy_fcgi:error] [pid 28194:tid 140353306859264] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:27.334651 2026] [proxy_fcgi:error] [pid 28194:tid 140353256503040] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:27.556744 2026] [proxy_fcgi:error] [pid 28194:tid 140353290073856] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:27.663055 2026] [proxy_fcgi:error] [pid 28194:tid 140353206146816] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:27.769883 2026] [proxy_fcgi:error] [pid 28194:tid 140353435567872] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:28.024922 2026] [proxy_fcgi:error] [pid 28194:tid 140353222932224] [client 4.205.62.107:19853] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 22:32:28.025046 2026] [:error] [pid 28194:tid 140353222932224] [client 4.205.62.107:19853] [client 4.205.62.107] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/06.php"] [unique_id "apeYzAdz-EN0cDNAEVKjVwAAAVM"]
[Tue Sep 01 22:32:28.168340 2026] [:error] [pid 28194:tid 140353273288448] [client 4.205.62.107:19853] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aws_config.php"] [unique_id "apeYzAdz-EN0cDNAEVKjWAAAAU0"]
[Tue Sep 01 22:32:31.419046 2026] [:error] [pid 6091:tid 140353281681152] [client 4.205.62.107:58906] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phina.php"] [unique_id "apeYz8kVYOXruxV21N6BVAAAAIw"]
[Tue Sep 01 22:32:32.674857 2026] [:error] [pid 6089:tid 140353298466560] [client 4.205.62.107:19888] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/66.php"] [unique_id "apeY0JjeM2TaVrIYSc-g9AAAAAo"]
[Tue Sep 01 22:32:33.915106 2026] [:error] [pid 6089:tid 140353290073856] [client 4.205.62.107:58907] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/localconf.php"] [unique_id "apeY0ZjeM2TaVrIYSc-g9QAAAAs"]
[Tue Sep 01 22:32:35.131483 2026] [:error] [pid 6090:tid 140353231324928] [client 4.205.62.107:58913] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cli_bootstrap.php"] [unique_id "apeY07Pf1VxWhFqgvWtpogAAAFI"]
[Tue Sep 01 22:32:36.337120 2026] [:error] [pid 29615:tid 140353264895744] [client 4.205.62.107:19877] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dialog.php"] [unique_id "apeY1J1PBa8fnDJM-t4eNgAAAg4"]
[Tue Sep 01 22:32:37.550354 2026] [:error] [pid 6091:tid 140353323644672] [client 4.205.62.107:19895] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apeY1ckVYOXruxV21N6BVQAAAIc"]
[Tue Sep 01 22:32:38.760434 2026] [:error] [pid 6411:tid 140353248110336] [client 4.205.62.107:19873] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/error_log.php"] [unique_id "apeY1q-5XxGfLhlq8xmJAQAAANA"]
[Tue Sep 01 22:32:39.980763 2026] [:error] [pid 6089:tid 140353264895744] [client 4.205.62.107:58909] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bengi.php"] [unique_id "apeY15jeM2TaVrIYSc-g9wAAAA4"]
[Tue Sep 01 22:32:41.214595 2026] [:error] [pid 11529:tid 140353231324928] [client 4.205.62.107:58921] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a1vx.php"] [unique_id "apeY2S580fjDz1VV6ycnjQAAAdI"]
[Tue Sep 01 22:32:42.420161 2026] [:error] [pid 9194:tid 140353189361408] [client 4.205.62.107:58929] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/konfig.php"] [unique_id "apeY2odqWCmIAB5WEG_McwAAARc"]
[Tue Sep 01 22:32:43.632043 2026] [:error] [pid 9194:tid 140353273288448] [client 4.205.62.107:19886] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xqq.php"] [unique_id "apeY24dqWCmIAB5WEG_MdAAAAQ0"]
[Tue Sep 01 22:32:44.848380 2026] [:error] [pid 6091:tid 140353306859264] [client 4.205.62.107:58923] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aws-credentials.php"] [unique_id "apeY3MkVYOXruxV21N6BWAAAAIk"]
[Tue Sep 01 22:32:46.051178 2026] [:error] [pid 6091:tid 140353197754112] [client 4.205.62.107:19870] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wpver.php"] [unique_id "apeY3skVYOXruxV21N6BWQAAAJY"]
[Tue Sep 01 22:32:47.253560 2026] [:error] [pid 11529:tid 140353214539520] [client 4.205.62.107:58928] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin.php"] [unique_id "apeY3y580fjDz1VV6ycnkAAAAdQ"]
[Tue Sep 01 22:32:48.468150 2026] [:error] [pid 28500:tid 140353332037376] [client 4.205.62.107:58917] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/paths.php"] [unique_id "apeY4DQYUm0S3Gh9Jn9_fQAAAYY"]
[Tue Sep 01 22:32:49.675394 2026] [:error] [pid 28500:tid 140353435567872] [client 4.205.62.107:58890] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-konfig.backup.php"] [unique_id "apeY4TQYUm0S3Gh9Jn9_fgAAAYI"]
[Tue Sep 01 22:32:50.877337 2026] [:error] [pid 29615:tid 140353273288448] [client 4.205.62.107:58914] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/motu.php"] [unique_id "apeY4p1PBa8fnDJM-t4eNwAAAg0"]
[Tue Sep 01 22:32:52.091220 2026] [:error] [pid 28194:tid 140353248110336] [client 4.205.62.107:58908] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/var/www/wallet/index.php"] [unique_id "apeY5Adz-EN0cDNAEVKjXgAAAVA"]
[Tue Sep 01 22:32:53.313594 2026] [:error] [pid 29730:tid 140353248110336] [client 4.205.62.107:19840] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xza.php"] [unique_id "apeY5UKKsXadAWpiFbs3MQAAAlA"]
[Tue Sep 01 22:32:54.543552 2026] [:error] [pid 28500:tid 140353290073856] [client 4.205.62.107:58900] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/doc.php"] [unique_id "apeY5jQYUm0S3Gh9Jn9_fwAAAYs"]
[Tue Sep 01 22:32:55.764744 2026] [:error] [pid 28194:tid 140353306859264] [client 4.205.62.107:58898] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cu.php"] [unique_id "apeY5wdz-EN0cDNAEVKjXwAAAUk"]
[Tue Sep 01 22:32:56.971465 2026] [:error] [pid 11529:tid 140353323644672] [client 4.205.62.107:58882] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/groceries/index.php"] [unique_id "apeY6C580fjDz1VV6ycnlQAAAcc"]
[Tue Sep 01 22:32:58.180953 2026] [:error] [pid 6089:tid 140353239717632] [client 4.205.62.107:58895] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-config.backup.php"] [unique_id "apeY6pjeM2TaVrIYSc-g_AAAABE"]
[Tue Sep 01 22:32:59.382618 2026] [:error] [pid 6091:tid 140353323644672] [client 4.205.62.107:58887] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/app.default.php"] [unique_id "apeY68kVYOXruxV21N6BZAAAAIc"]
[Tue Sep 01 22:33:00.582755 2026] [:error] [pid 11529:tid 140353290073856] [client 4.205.62.107:58918] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/database.php"] [unique_id "apeY7C580fjDz1VV6ycnmAAAAcs"]
[Tue Sep 01 22:33:01.784960 2026] [:error] [pid 6089:tid 140353231324928] [client 4.205.62.107:19903] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-blog.php"] [unique_id "apeY7ZjeM2TaVrIYSc-g_QAAABI"]
[Tue Sep 01 22:33:03.003120 2026] [:error] [pid 6090:tid 140353239717632] [client 4.205.62.107:19892] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/apikeys.php"] [unique_id "apeY77Pf1VxWhFqgvWtprgAAAFE"]
[Tue Sep 01 22:33:04.209258 2026] [:error] [pid 11529:tid 140353298466560] [client 4.205.62.107:19857] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-class.php"] [unique_id "apeY8C580fjDz1VV6ycnmwAAAco"]
[Tue Sep 01 22:33:05.421090 2026] [:error] [pid 28500:tid 140353264895744] [client 4.205.62.107:58903] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/infos.php"] [unique_id "apeY8TQYUm0S3Gh9Jn9_gAAAAY4"]
[Tue Sep 01 22:33:06.623753 2026] [:error] [pid 6089:tid 140353273288448] [client 4.205.62.107:58905] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nw.php"] [unique_id "apeY8pjeM2TaVrIYSc-hAAAAAA0"]
[Tue Sep 01 22:33:07.848920 2026] [:error] [pid 6091:tid 140353206146816] [client 4.205.62.107:58881] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ebahvhhh.php"] [unique_id "apeY88kVYOXruxV21N6BaAAAAJU"]
[Tue Sep 01 22:33:09.098055 2026] [:error] [pid 6090:tid 140353435567872] [client 4.205.62.107:58885] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cp2.php"] [unique_id "apeY9bPf1VxWhFqgvWtpsQAAAEI"]
[Tue Sep 01 22:33:10.308370 2026] [:error] [pid 6090:tid 140353340430080] [client 4.205.62.107:19855] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/agg.php"] [unique_id "apeY9rPf1VxWhFqgvWtpsgAAAEU"]
[Tue Sep 01 22:33:11.510734 2026] [:error] [pid 6091:tid 140353435567872] [client 4.205.62.107:19892] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fucku.php"] [unique_id "apeY98kVYOXruxV21N6BaQAAAII"]
[Tue Sep 01 22:33:12.726874 2026] [:error] [pid 6090:tid 140353197754112] [client 4.205.62.107:19894] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dd.php"] [unique_id "apeY-LPf1VxWhFqgvWtptAAAAFY"]
[Tue Sep 01 22:33:14.001553 2026] [:error] [pid 6091:tid 140353357215488] [client 4.205.62.107:53906] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/environment.php"] [unique_id "apeY-skVYOXruxV21N6BbQAAAIM"]
[Tue Sep 01 22:33:15.218583 2026] [:error] [pid 9194:tid 140353306859264] [client 4.205.62.107:19901] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aws_auth.php"] [unique_id "apeY-4dqWCmIAB5WEG_MeAAAAQk"]
[Tue Sep 01 22:33:16.450755 2026] [:error] [pid 11529:tid 140353290073856] [client 4.205.62.107:19846] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/koiy.php"] [unique_id "apeY_C580fjDz1VV6ycnqgAAAcs"]
[Tue Sep 01 22:33:17.718748 2026] [:error] [pid 11529:tid 140353248110336] [client 4.205.62.107:58786] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/userfuns.php"] [unique_id "apeY_S580fjDz1VV6ycnrgAAAdA"]
[Tue Sep 01 22:33:18.927734 2026] [:error] [pid 28194:tid 140353315251968] [client 4.205.62.107:58897] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/register.php"] [unique_id "apeY_gdz-EN0cDNAEVKjYQAAAUg"]
[Tue Sep 01 22:33:20.153000 2026] [:error] [pid 6089:tid 140353264895744] [client 4.205.62.107:58880] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/autogooey.php"] [unique_id "apeZAJjeM2TaVrIYSc-hAgAAAA4"]
[Tue Sep 01 22:33:21.377795 2026] [:error] [pid 9194:tid 140353248110336] [client 4.205.62.107:19847] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/oc460l3x.php"] [unique_id "apeZAYdqWCmIAB5WEG_MegAAARA"]
[Tue Sep 01 22:33:22.621816 2026] [:error] [pid 11529:tid 140353189361408] [client 4.205.62.107:19884] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/log.php"] [unique_id "apeZAi580fjDz1VV6ycntAAAAdc"]
[Tue Sep 01 22:33:23.826957 2026] [:error] [pid 9194:tid 140353443960576] [client 4.205.62.107:58930] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-konfig.php"] [unique_id "apeZA4dqWCmIAB5WEG_MewAAAQE"]
[Tue Sep 01 22:33:25.046601 2026] [:error] [pid 6090:tid 140353180968704] [client 4.205.62.107:58902] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hochladen.form.php"] [unique_id "apeZBbPf1VxWhFqgvWtpugAAAFg"]
[Tue Sep 01 22:33:26.268758 2026] [:error] [pid 28194:tid 140353197754112] [client 4.205.62.107:58922] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/87.php"] [unique_id "apeZBgdz-EN0cDNAEVKjYgAAAVY"]
[Tue Sep 01 22:33:27.508221 2026] [:error] [pid 28500:tid 140353315251968] [client 4.205.62.107:58884] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-tem.php"] [unique_id "apeZBzQYUm0S3Gh9Jn9_gQAAAYg"]
[Tue Sep 01 22:33:28.716827 2026] [:error] [pid 6089:tid 140353323644672] [client 4.205.62.107:58768] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apeZCJjeM2TaVrIYSc-hAwAAAAc"]
[Tue Sep 01 22:33:29.933495 2026] [:error] [pid 6091:tid 140353348822784] [client 4.205.62.107:58925] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zaza.php"] [unique_id "apeZCckVYOXruxV21N6BdgAAAIQ"]
[Tue Sep 01 22:33:31.139830 2026] [:error] [pid 11529:tid 140353248110336] [client 4.205.62.107:19852] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php_info.php"] [unique_id "apeZCy580fjDz1VV6ycnugAAAdA"]
[Tue Sep 01 22:33:32.432436 2026] [:error] [pid 28500:tid 140353206146816] [client 4.205.62.107:19890] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/g3.php"] [unique_id "apeZDDQYUm0S3Gh9Jn9_ggAAAZU"]
[Tue Sep 01 22:33:33.650708 2026] [:error] [pid 11529:tid 140353197754112] [client 4.205.62.107:19885] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zz.php"] [unique_id "apeZDS580fjDz1VV6ycnwQAAAdY"]
[Tue Sep 01 22:33:34.852741 2026] [:error] [pid 29730:tid 140353315251968] [client 4.205.62.107:19851] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xa.php"] [unique_id "apeZDkKKsXadAWpiFbs3NAAAAkg"]
[Tue Sep 01 22:33:36.115754 2026] [:error] [pid 6089:tid 140353315251968] [client 4.205.62.107:58901] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ms-edit.php"] [unique_id "apeZEJjeM2TaVrIYSc-hBgAAAAg"]
[Tue Sep 01 22:33:37.316034 2026] [:error] [pid 6091:tid 140353443960576] [client 4.205.62.107:53907] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/saml.php"] [unique_id "apeZEckVYOXruxV21N6BegAAAIE"]
[Tue Sep 01 22:33:38.535313 2026] [:error] [pid 9194:tid 140353222932224] [client 4.205.62.107:19880] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aws_credentials.php"] [unique_id "apeZEodqWCmIAB5WEG_MfQAAARM"]
[Tue Sep 01 22:33:39.754004 2026] [:error] [pid 6091:tid 140353315251968] [client 4.205.62.107:58911] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apeZE8kVYOXruxV21N6BfAAAAIg"]
[Tue Sep 01 22:33:40.988230 2026] [:error] [pid 29615:tid 140353340430080] [client 4.205.62.107:19864] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lmfi2.php"] [unique_id "apeZFJ1PBa8fnDJM-t4eOwAAAgU"]
[Tue Sep 01 22:33:42.320566 2026] [:error] [pid 6091:tid 140353222932224] [client 4.205.62.107:19849] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/snq.php"] [unique_id "apeZFskVYOXruxV21N6BfgAAAJM"]
[Tue Sep 01 22:33:43.535523 2026] [:error] [pid 9194:tid 140353315251968] [client 4.205.62.107:19863] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gjm.php"] [unique_id "apeZF4dqWCmIAB5WEG_MfgAAAQg"]
[Tue Sep 01 22:33:44.782333 2026] [:error] [pid 9194:tid 140353452353280] [client 4.205.62.107:58794] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fraro.php"] [unique_id "apeZGIdqWCmIAB5WEG_MfwAAAQA"]
[Tue Sep 01 22:33:46.038734 2026] [:error] [pid 6089:tid 140353290073856] [client 4.205.62.107:58761] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hiquido.com/index.php"] [unique_id "apeZGpjeM2TaVrIYSc-hCgAAAAs"]
[Tue Sep 01 22:33:47.277677 2026] [:error] [pid 6091:tid 140353256503040] [client 4.205.62.107:19859] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xp.php"] [unique_id "apeZG8kVYOXruxV21N6BfwAAAI8"]
[Tue Sep 01 22:33:50.584136 2026] [:error] [pid 29615:tid 140353264895744] [client 4.205.62.107:58766] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/tax.php"] [unique_id "apeZHp1PBa8fnDJM-t4ePQAAAg4"]
[Tue Sep 01 22:33:51.801228 2026] [:error] [pid 28194:tid 140353180968704] [client 4.205.62.107:58888] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ms-edit.php"] [unique_id "apeZHwdz-EN0cDNAEVKjZgAAAVg"]
[Tue Sep 01 22:33:53.055636 2026] [:error] [pid 28194:tid 140353239717632] [client 4.205.62.107:53783] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fm.php"] [unique_id "apeZIQdz-EN0cDNAEVKjZwAAAVE"]
[Tue Sep 01 22:33:54.300874 2026] [:error] [pid 29730:tid 140353222932224] [client 4.205.62.107:58763] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws62.php"] [unique_id "apeZIkKKsXadAWpiFbs3NQAAAlM"]
[Tue Sep 01 22:33:55.540896 2026] [:error] [pid 9194:tid 140353214539520] [client 4.205.62.107:19858] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fun.php"] [unique_id "apeZI4dqWCmIAB5WEG_MgQAAARQ"]
[Tue Sep 01 22:33:56.743882 2026] [:error] [pid 6089:tid 140353357215488] [client 4.205.62.107:58904] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sdsa.php"] [unique_id "apeZJJjeM2TaVrIYSc-hDwAAAAM"]
[Tue Sep 01 22:33:58.064083 2026] [:error] [pid 6089:tid 140353306859264] [client 4.205.62.107:58920] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/05.php"] [unique_id "apeZJpjeM2TaVrIYSc-hEAAAAAk"]
[Tue Sep 01 22:33:59.286254 2026] [:error] [pid 29730:tid 140353332037376] [client 4.205.62.107:58810] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pouhg.php"] [unique_id "apeZJ0KKsXadAWpiFbs3OAAAAkY"]
[Tue Sep 01 22:34:00.497791 2026] [:error] [pid 6089:tid 140353443960576] [client 4.205.62.107:58937] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/txets.php"] [unique_id "apeZKJjeM2TaVrIYSc-hEQAAAAE"]
[Tue Sep 01 22:34:01.706152 2026] [:error] [pid 9194:tid 140353197754112] [client 4.205.62.107:19871] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/333.php"] [unique_id "apeZKYdqWCmIAB5WEG_MgwAAARY"]
[Tue Sep 01 22:34:03.261047 2026] [:error] [pid 9194:tid 140353206146816] [client 4.205.62.107:58787] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/packed.php"] [unique_id "apeZK4dqWCmIAB5WEG_MhAAAARU"]
[Tue Sep 01 22:34:04.517775 2026] [:error] [pid 28194:tid 140353256503040] [client 4.205.62.107:58919] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mga.php"] [unique_id "apeZLAdz-EN0cDNAEVKjaAAAAU8"]
[Tue Sep 01 22:34:05.750590 2026] [:error] [pid 6091:tid 140353256503040] [client 4.205.62.107:58938] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/api.php"] [unique_id "apeZLckVYOXruxV21N6BiQAAAI8"]
[Tue Sep 01 22:34:06.965893 2026] [:error] [pid 6089:tid 140353189361408] [client 4.205.62.107:19850] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/classsmtps.php"] [unique_id "apeZLpjeM2TaVrIYSc-hFwAAABc"]
[Tue Sep 01 22:34:08.171227 2026] [:error] [pid 28500:tid 140353332037376] [client 4.205.62.107:58769] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xve22.php"] [unique_id "apeZMDQYUm0S3Gh9Jn9_hwAAAYY"]
[Tue Sep 01 22:34:09.514955 2026] [:error] [pid 29730:tid 140353357215488] [client 4.205.62.107:58935] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php-info.php"] [unique_id "apeZMUKKsXadAWpiFbs3OgAAAkM"]
[Tue Sep 01 22:34:10.739908 2026] [:error] [pid 29615:tid 140353435567872] [client 4.205.62.107:58808] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sale.php"] [unique_id "apeZMp1PBa8fnDJM-t4eQgAAAgI"]
[Tue Sep 01 22:34:11.961053 2026] [:error] [pid 6090:tid 140353189361408] [client 4.205.62.107:58793] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fns.php"] [unique_id "apeZM7Pf1VxWhFqgvWtp1QAAAFc"]
[Tue Sep 01 22:34:13.173101 2026] [:error] [pid 6411:tid 140353189361408] [client 4.205.62.107:19862] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/koiy.php"] [unique_id "apeZNa-5XxGfLhlq8xmJCAAAANc"]
[Tue Sep 01 22:34:14.486509 2026] [:error] [pid 6089:tid 140353315251968] [client 4.205.62.107:19868] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aww.php"] [unique_id "apeZNpjeM2TaVrIYSc-hGwAAAAg"]
[Tue Sep 01 22:34:15.760892 2026] [:error] [pid 28500:tid 140353256503040] [client 4.205.62.107:19856] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/requirements.php"] [unique_id "apeZNzQYUm0S3Gh9Jn9_iwAAAY8"]
[Tue Sep 01 22:34:17.006219 2026] [:error] [pid 6091:tid 140353231324928] [client 4.205.62.107:58931] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/retu11.PhP"] [unique_id "apeZOckVYOXruxV21N6BjQAAAJI"]
[Tue Sep 01 22:34:18.391382 2026] [:error] [pid 6089:tid 140353290073856] [client 4.205.62.107:58915] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/guk.php"] [unique_id "apeZOpjeM2TaVrIYSc-hHQAAAAs"]
[Tue Sep 01 22:34:19.634232 2026] [:error] [pid 29730:tid 140353348822784] [client 4.205.62.107:19841] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/linusadmin-phpinfo.php"] [unique_id "apeZO0KKsXadAWpiFbs3PAAAAkQ"]
[Tue Sep 01 22:34:20.857139 2026] [:error] [pid 28194:tid 140353214539520] [client 4.205.62.107:58790] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws61.php"] [unique_id "apeZPAdz-EN0cDNAEVKjbgAAAVQ"]
[Tue Sep 01 22:34:22.069135 2026] [:error] [pid 29615:tid 140353290073856] [client 4.205.62.107:19891] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/test.php"] [unique_id "apeZPp1PBa8fnDJM-t4eRQAAAgs"]
[Tue Sep 01 22:34:23.283831 2026] [:error] [pid 28194:tid 140353239717632] [client 4.205.62.107:58784] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aws_settings.php"] [unique_id "apeZPwdz-EN0cDNAEVKjcAAAAVE"]
[Tue Sep 01 22:34:24.503771 2026] [:error] [pid 6411:tid 140353239717632] [client 4.205.62.107:19882] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/brc.php"] [unique_id "apeZQK-5XxGfLhlq8xmJCQAAANE"]
[Tue Sep 01 22:34:25.732243 2026] [:error] [pid 6089:tid 140353189361408] [client 4.205.62.107:58926] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/asdf.php"] [unique_id "apeZQZjeM2TaVrIYSc-hHwAAABc"]
[Tue Sep 01 22:34:27.026765 2026] [:error] [pid 6089:tid 140353248110336] [client 4.205.62.107:19898] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/avim.php"] [unique_id "apeZQ5jeM2TaVrIYSc-hIAAAABA"]
[Tue Sep 01 22:34:28.242379 2026] [:error] [pid 28500:tid 140353281681152] [client 4.205.62.107:58812] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/old_phpinfo.php"] [unique_id "apeZRDQYUm0S3Gh9Jn9_jQAAAYw"]
[Tue Sep 01 22:34:29.463669 2026] [:error] [pid 6091:tid 140353197754112] [client 4.205.62.107:58809] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminfus.php"] [unique_id "apeZRckVYOXruxV21N6BkQAAAJY"]
[Tue Sep 01 22:34:30.677307 2026] [:error] [pid 29730:tid 140353452353280] [client 4.205.62.107:58778] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/session.php"] [unique_id "apeZRkKKsXadAWpiFbs3PgAAAkA"]
[Tue Sep 01 22:34:31.891595 2026] [:error] [pid 29730:tid 140353340430080] [client 4.205.62.107:53926] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/otuz1.php"] [unique_id "apeZR0KKsXadAWpiFbs3QAAAAkU"]
[Tue Sep 01 22:34:33.109892 2026] [:error] [pid 9194:tid 140353290073856] [client 4.205.62.107:58792] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/time.php"] [unique_id "apeZSYdqWCmIAB5WEG_MiwAAAQs"]
[Tue Sep 01 22:34:34.322746 2026] [:error] [pid 6089:tid 140353273288448] [client 4.205.62.107:53951] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apeZSpjeM2TaVrIYSc-hIgAAAA0"]
[Tue Sep 01 22:34:35.665588 2026] [:error] [pid 6411:tid 140353248110336] [client 4.205.62.107:58811] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ah25.php"] [unique_id "apeZS6-5XxGfLhlq8xmJCgAAANA"]
[Tue Sep 01 22:34:36.900413 2026] [:error] [pid 6091:tid 140353248110336] [client 4.205.62.107:58767] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ccou.php"] [unique_id "apeZTMkVYOXruxV21N6BkgAAAJA"]
[Tue Sep 01 22:34:38.626994 2026] [:error] [pid 29615:tid 140353248110336] [client 4.205.62.107:19854] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xin1.php"] [unique_id "apeZTp1PBa8fnDJM-t4eSAAAAhA"]
[Tue Sep 01 22:34:48.398054 2026] [:error] [pid 6089:tid 140353248110336] [client 4.205.62.107:58783] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xmy.php"] [unique_id "apeZWJjeM2TaVrIYSc-hKAAAABA"]
[Tue Sep 01 22:34:49.655407 2026] [:error] [pid 6091:tid 140353239717632] [client 4.205.62.107:53888] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpi.php"] [unique_id "apeZWckVYOXruxV21N6BmAAAAJE"]
[Tue Sep 01 22:34:50.940818 2026] [:error] [pid 6089:tid 140353348822784] [client 4.205.62.107:53890] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hosty.php"] [unique_id "apeZWpjeM2TaVrIYSc-hKgAAAAQ"]
[Tue Sep 01 22:34:52.209850 2026] [:error] [pid 6091:tid 140353332037376] [client 4.205.62.107:19866] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/atex1.php"] [unique_id "apeZXMkVYOXruxV21N6BmQAAAIY"]
[Tue Sep 01 22:34:53.513801 2026] [:error] [pid 6089:tid 140353239717632] [client 4.205.62.107:58891] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mcebraed.php"] [unique_id "apeZXZjeM2TaVrIYSc-hLAAAABE"]
[Tue Sep 01 22:34:54.744201 2026] [:error] [pid 28500:tid 140353214539520] [client 4.205.62.107:58760] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php-details.php"] [unique_id "apeZXjQYUm0S3Gh9Jn9_kAAAAZQ"]
[Tue Sep 01 22:34:55.996526 2026] [:error] [pid 6090:tid 140353443960576] [client 4.205.62.107:58806] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/grsiuk.php"] [unique_id "apeZX7Pf1VxWhFqgvWtp1gAAAEE"]
[Tue Sep 01 22:34:57.261449 2026] [:error] [pid 6091:tid 140353315251968] [client 4.205.62.107:53927] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/config_dev.php"] [unique_id "apeZYckVYOXruxV21N6BnQAAAIg"]
[Tue Sep 01 22:34:58.512065 2026] [:error] [pid 6091:tid 140353180968704] [client 4.205.62.107:58781] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/vx.php"] [unique_id "apeZYskVYOXruxV21N6BngAAAJg"]
[Tue Sep 01 22:34:59.777328 2026] [:error] [pid 28194:tid 140353323644672] [client 4.205.62.107:58785] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lala.php"] [unique_id "apeZYwdz-EN0cDNAEVKjegAAAUc"]
[Tue Sep 01 22:35:01.047381 2026] [:error] [pid 28194:tid 140353348822784] [client 4.205.62.107:19842] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pinfo.php"] [unique_id "apeZZQdz-EN0cDNAEVKjewAAAUQ"]
[Tue Sep 01 22:35:02.394559 2026] [:error] [pid 6411:tid 140353443960576] [client 4.205.62.107:19860] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/edit.php"] [unique_id "apeZZq-5XxGfLhlq8xmJDAAAAME"]
[Tue Sep 01 22:35:03.815695 2026] [:error] [pid 28500:tid 140353340430080] [client 4.205.62.107:58899] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/debuggen.php"] [unique_id "apeZZzQYUm0S3Gh9Jn9_lwAAAYU"]
[Tue Sep 01 22:35:05.035737 2026] [:error] [pid 6089:tid 140353248110336] [client 4.205.62.107:58758] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-act.php"] [unique_id "apeZaZjeM2TaVrIYSc-hMAAAABA"]
[Tue Sep 01 22:35:06.304282 2026] [:error] [pid 29615:tid 140353231324928] [client 4.205.62.107:58814] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/chosen.php"] [unique_id "apeZap1PBa8fnDJM-t4eSwAAAhI"]
[Tue Sep 01 22:35:07.580175 2026] [:error] [pid 28194:tid 140353281681152] [client 4.205.62.107:58777] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public/wp-blog.php"] [unique_id "apeZawdz-EN0cDNAEVKjfQAAAUw"]
[Tue Sep 01 22:35:08.833884 2026] [:error] [pid 28500:tid 140353248110336] [client 4.205.62.107:19869] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/queue.php"] [unique_id "apeZbDQYUm0S3Gh9Jn9_mQAAAZA"]
[Tue Sep 01 22:35:11.377673 2026] [:error] [pid 6089:tid 140353348822784] [client 4.205.62.107:58893] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin-ajax.php"] [unique_id "apeZb5jeM2TaVrIYSc-hNQAAAAQ"]
[Tue Sep 01 22:35:12.579092 2026] [:error] [pid 6091:tid 140353298466560] [client 4.205.62.107:58788] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/btx25.php"] [unique_id "apeZcMkVYOXruxV21N6BoAAAAIo"]
[Tue Sep 01 22:35:13.826565 2026] [:error] [pid 28500:tid 140353222932224] [client 4.205.62.107:53923] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/goods.php"] [unique_id "apeZcTQYUm0S3Gh9Jn9_oAAAAZM"]
[Tue Sep 01 22:35:15.032252 2026] [:error] [pid 6091:tid 140353231324928] [client 4.205.62.107:19900] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/umgebung.php"] [unique_id "apeZc8kVYOXruxV21N6BogAAAJI"]
[Tue Sep 01 22:35:16.254517 2026] [:error] [pid 6090:tid 140353180968704] [client 4.205.62.107:58892] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/124.php"] [unique_id "apeZdLPf1VxWhFqgvWtp1wAAAFg"]
[Tue Sep 01 22:35:17.467833 2026] [:error] [pid 6090:tid 140353214539520] [client 4.205.62.107:58797] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file59.php"] [unique_id "apeZdbPf1VxWhFqgvWtp2QAAAFQ"]
[Tue Sep 01 22:35:18.702255 2026] [:error] [pid 11529:tid 140353239717632] [client 4.205.62.107:58927] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/thui.php"] [unique_id "apeZdi580fjDz1VV6ycn5gAAAdE"]
[Tue Sep 01 22:35:20.089281 2026] [:error] [pid 6090:tid 140353332037376] [client 4.205.62.107:19865] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/server-info.php"] [unique_id "apeZeLPf1VxWhFqgvWtp2wAAAEY"]
[Tue Sep 01 22:35:21.320468 2026] [:error] [pid 6090:tid 140353435567872] [client 4.205.62.107:58765] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws79.php"] [unique_id "apeZebPf1VxWhFqgvWtp3AAAAEI"]
[Tue Sep 01 22:35:22.536035 2026] [:error] [pid 29730:tid 140353298466560] [client 4.205.62.107:53918] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/routes.php"] [unique_id "apeZekKKsXadAWpiFbs3RwAAAko"]
[Tue Sep 01 22:35:23.750183 2026] [:error] [pid 6089:tid 140353264895744] [client 4.205.62.107:19843] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public/rip.php.php"] [unique_id "apeZe5jeM2TaVrIYSc-hPwAAAA4"]
[Tue Sep 01 22:35:25.071584 2026] [:error] [pid 6091:tid 140353206146816] [client 4.205.62.107:53911] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wsws.php"] [unique_id "apeZfckVYOXruxV21N6BqQAAAJU"]
[Tue Sep 01 22:35:26.330455 2026] [:error] [pid 6411:tid 140353452353280] [client 4.205.62.107:58933] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nlnub.php"] [unique_id "apeZfq-5XxGfLhlq8xmJDQAAAMA"]
[Tue Sep 01 22:35:28.003562 2026] [:error] [pid 29730:tid 140353306859264] [client 4.205.62.107:58941] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sys.php"] [unique_id "apeZgEKKsXadAWpiFbs3SgAAAkk"]
[Tue Sep 01 22:35:29.745404 2026] [:error] [pid 6089:tid 140353348822784] [client 4.205.62.107:58815] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sadd.php"] [unique_id "apeZgZjeM2TaVrIYSc-hQgAAAAQ"]
[Tue Sep 01 22:35:32.247722 2026] [:error] [pid 9194:tid 140353248110336] [client 4.205.62.107:19848] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cloud.php"] [unique_id "apeZhIdqWCmIAB5WEG_MjgAAARA"]
[Tue Sep 01 22:35:33.507065 2026] [:error] [pid 6089:tid 140353306859264] [client 4.205.62.107:53936] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-info.php"] [unique_id "apeZhZjeM2TaVrIYSc-hRAAAAAk"]
[Tue Sep 01 22:35:34.733069 2026] [:error] [pid 6089:tid 140353281681152] [client 4.205.62.107:58883] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/upload.form.php"] [unique_id "apeZhpjeM2TaVrIYSc-hRQAAAAw"]
[Tue Sep 01 22:35:36.068392 2026] [:error] [pid 9194:tid 140353180968704] [client 4.205.62.107:58804] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/png.php"] [unique_id "apeZiIdqWCmIAB5WEG_MkQAAARg"]
[Tue Sep 01 22:35:37.290930 2026] [:error] [pid 29615:tid 140353290073856] [client 4.205.62.107:19876] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/configuration.php"] [unique_id "apeZiZ1PBa8fnDJM-t4eTwAAAgs"]
[Tue Sep 01 22:35:41.476883 2026] [:error] [pid 28194:tid 140353315251968] [client 4.205.62.107:58772] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/25.php"] [unique_id "apeZjQdz-EN0cDNAEVKjgQAAAUg"]
[Tue Sep 01 22:35:48.404034 2026] [:error] [pid 6411:tid 140353180968704] [client 4.205.62.107:58800] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pass4.php"] [unique_id "apeZlK-5XxGfLhlq8xmJFAAAANg"]
[Tue Sep 01 22:35:49.779395 2026] [:error] [pid 6089:tid 140353222932224] [client 4.205.62.107:53947] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public/vx.php"] [unique_id "apeZlZjeM2TaVrIYSc-hRwAAABM"]
[Tue Sep 01 22:35:50.987332 2026] [:error] [pid 28194:tid 140353340430080] [client 4.205.62.107:53891] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/olfclass.php"] [unique_id "apeZlgdz-EN0cDNAEVKjgwAAAUU"]
[Tue Sep 01 22:35:52.814381 2026] [:error] [pid 6090:tid 140353248110336] [client 4.205.62.107:53819] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/test1.php"] [unique_id "apeZmLPf1VxWhFqgvWtp3QAAAFA"]
[Tue Sep 01 22:35:54.353031 2026] [:error] [pid 28500:tid 140353435567872] [client 4.205.62.107:58805] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/drykl.php"] [unique_id "apeZmjQYUm0S3Gh9Jn9_pQAAAYI"]
[Tue Sep 01 22:35:55.627042 2026] [:error] [pid 28194:tid 140353348822784] [client 4.205.62.107:19883] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ty.php"] [unique_id "apeZmwdz-EN0cDNAEVKjhQAAAUQ"]
[Tue Sep 01 22:35:57.606879 2026] [:error] [pid 28500:tid 140353256503040] [client 4.205.62.107:58910] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/myfile.php"] [unique_id "apeZnTQYUm0S3Gh9Jn9_pgAAAY8"]
[Tue Sep 01 22:35:58.824033 2026] [:error] [pid 29730:tid 140353248110336] [client 4.205.62.107:58793] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fff.php"] [unique_id "apeZnkKKsXadAWpiFbs3UAAAAlA"]
[Tue Sep 01 22:36:00.043585 2026] [:error] [pid 6411:tid 140353348822784] [client 4.205.62.107:58912] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bootstrap.php"] [unique_id "apeZoK-5XxGfLhlq8xmJFgAAAMQ"]
[Tue Sep 01 22:36:01.448412 2026] [:error] [pid 6089:tid 140353323644672] [client 4.205.62.107:58789] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/server_info.php"] [unique_id "apeZoZjeM2TaVrIYSc-hSwAAAAc"]
[Tue Sep 01 22:36:03.275328 2026] [:error] [pid 6089:tid 140353435567872] [client 4.205.62.107:58943] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/X57.php"] [unique_id "apeZo5jeM2TaVrIYSc-hTAAAAAI"]
[Tue Sep 01 22:36:04.834697 2026] [:error] [pid 6089:tid 140353340430080] [client 4.205.62.107:58894] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/temp.php"] [unique_id "apeZpJjeM2TaVrIYSc-hTQAAAAU"]
[Tue Sep 01 22:36:06.109371 2026] [:error] [pid 6089:tid 140353239717632] [client 4.205.62.107:58796] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aws.php"] [unique_id "apeZppjeM2TaVrIYSc-hUAAAABE"]
[Tue Sep 01 22:36:07.362997 2026] [:error] [pid 29615:tid 140353180968704] [client 4.205.62.107:58886] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/services.php"] [unique_id "apeZp51PBa8fnDJM-t4eUwAAAhg"]
[Tue Sep 01 22:36:08.567623 2026] [:error] [pid 6089:tid 140353197754112] [client 4.205.62.107:58774] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/radio.php"] [unique_id "apeZqJjeM2TaVrIYSc-hUQAAABY"]
[Tue Sep 01 22:36:09.785231 2026] [:error] [pid 29615:tid 140353248110336] [client 4.205.62.107:53900] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fleen.php"] [unique_id "apeZqZ1PBa8fnDJM-t4eVAAAAhA"]
[Tue Sep 01 22:36:11.011249 2026] [:error] [pid 6089:tid 140353248110336] [client 4.205.62.107:58932] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file21.php"] [unique_id "apeZq5jeM2TaVrIYSc-hVAAAABA"]
[Tue Sep 01 22:36:12.231027 2026] [:error] [pid 28500:tid 140353443960576] [client 4.205.62.107:19882] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/f35.php"] [unique_id "apeZrDQYUm0S3Gh9Jn9_qQAAAYE"]
[Tue Sep 01 22:36:13.629619 2026] [:error] [pid 28194:tid 140353357215488] [client 4.205.62.107:53774] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/paypal.php"] [unique_id "apeZrQdz-EN0cDNAEVKjiAAAAUM"]
[Tue Sep 01 22:36:14.913231 2026] [:error] [pid 28194:tid 140353222932224] [client 4.205.62.107:58756] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-access.php"] [unique_id "apeZrgdz-EN0cDNAEVKjigAAAVM"]
[Tue Sep 01 22:36:16.634584 2026] [:error] [pid 6091:tid 140353306859264] [client 4.205.62.107:53763] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cxc.php"] [unique_id "apeZsMkVYOXruxV21N6BvQAAAIk"]
[Tue Sep 01 22:36:18.708442 2026] [:error] [pid 6090:tid 140353180968704] [client 4.205.62.107:58782] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xda.php"] [unique_id "apeZsrPf1VxWhFqgvWtp4QAAAFg"]
[Tue Sep 01 22:36:20.051601 2026] [:error] [pid 28500:tid 140353323644672] [client 4.205.62.107:53792] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aws_secret_config.php"] [unique_id "apeZtDQYUm0S3Gh9Jn9_rAAAAYc"]
[Tue Sep 01 22:36:21.536257 2026] [:error] [pid 28194:tid 140353315251968] [client 4.205.62.107:19845] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public/bnn_.php.php"] [unique_id "apeZtQdz-EN0cDNAEVKjiwAAAUg"]
[Tue Sep 01 22:36:22.974485 2026] [:error] [pid 6411:tid 140353273288448] [client 4.205.62.107:58755] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/application.config.php"] [unique_id "apeZtq-5XxGfLhlq8xmJHAAAAM0"]
[Tue Sep 01 22:36:24.235528 2026] [:error] [pid 6411:tid 140353281681152] [client 4.205.62.107:58936] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/oiko6u.php"] [unique_id "apeZuK-5XxGfLhlq8xmJHQAAAMw"]
[Tue Sep 01 22:36:25.461465 2026] [:error] [pid 29730:tid 140353264895744] [client 4.205.62.107:19879] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/app_local.php"] [unique_id "apeZuUKKsXadAWpiFbs3VAAAAk4"]
[Tue Sep 01 22:36:26.703480 2026] [:error] [pid 11529:tid 140353323644672] [client 4.205.62.107:53910] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/erty.php"] [unique_id "apeZui580fjDz1VV6ycn8AAAAcc"]
[Tue Sep 01 22:36:27.948325 2026] [:error] [pid 6091:tid 140353222932224] [client 4.205.62.107:58801] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aws_keys.php"] [unique_id "apeZu8kVYOXruxV21N6ByQAAAJM"]
[Tue Sep 01 22:36:29.183376 2026] [:error] [pid 11529:tid 140353298466560] [client 4.205.62.107:53893] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/filesystems.php"] [unique_id "apeZvS580fjDz1VV6ycn8wAAAco"]
[Tue Sep 01 22:36:30.459169 2026] [:error] [pid 28500:tid 140353180968704] [client 4.205.62.107:19889] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bigdump.php"] [unique_id "apeZvjQYUm0S3Gh9Jn9_sQAAAZg"]
[Tue Sep 01 22:36:31.839059 2026] [:error] [pid 28194:tid 140353348822784] [client 4.205.62.107:19896] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gnmlc.php"] [unique_id "apeZvwdz-EN0cDNAEVKjjwAAAUQ"]
[Tue Sep 01 22:36:33.380596 2026] [:error] [pid 11529:tid 140353256503040] [client 4.205.62.107:58803] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mamzi.php"] [unique_id "apeZwS580fjDz1VV6ycn9gAAAc8"]
[Tue Sep 01 22:36:34.898689 2026] [:error] [pid 28194:tid 140353332037376] [client 4.205.62.107:53896] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "apeZwgdz-EN0cDNAEVKjkAAAAUY"]
[Tue Sep 01 22:36:36.159741 2026] [:error] [pid 6090:tid 140353332037376] [client 4.205.62.107:53922] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nzv.php"] [unique_id "apeZxLPf1VxWhFqgvWtp4wAAAEY"]
[Tue Sep 01 22:36:37.412614 2026] [:error] [pid 28194:tid 140353222932224] [client 4.205.62.107:58770] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/4563.php"] [unique_id "apeZxQdz-EN0cDNAEVKjmAAAAVM"]
[Tue Sep 01 22:36:38.642625 2026] [:error] [pid 6089:tid 140353443960576] [client 4.205.62.107:58939] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/debug.php"] [unique_id "apeZxpjeM2TaVrIYSc-hZgAAAAE"]
[Tue Sep 01 22:36:39.887606 2026] [:error] [pid 11529:tid 140353332037376] [client 4.205.62.107:58790] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lm15.php"] [unique_id "apeZxy580fjDz1VV6ycn-AAAAcY"]
[Tue Sep 01 22:36:41.133672 2026] [:error] [pid 11529:tid 140353180968704] [client 4.205.62.107:53781] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cache-compat.php"] [unique_id "apeZyS580fjDz1VV6ycn-QAAAdg"]
[Tue Sep 01 22:36:42.395388 2026] [:error] [pid 6089:tid 140353290073856] [client 4.205.62.107:58780] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/app_dev.php"] [unique_id "apeZypjeM2TaVrIYSc-hawAAAAs"]
[Tue Sep 01 22:36:43.620741 2026] [:error] [pid 28194:tid 140353315251968] [client 4.205.62.107:58916] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/plss3.php"] [unique_id "apeZywdz-EN0cDNAEVKjrwAAAUg"]
[Tue Sep 01 22:36:44.863275 2026] [:error] [pid 28500:tid 140353357215488] [client 4.205.62.107:53895] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gecko-litespeed.php"] [unique_id "apeZzDQYUm0S3Gh9Jn9_tAAAAYM"]
[Tue Sep 01 22:36:47.469295 2026] [:error] [pid 6091:tid 140353290073856] [client 4.205.62.107:58773] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/env.php"] [unique_id "apeZz8kVYOXruxV21N6B0AAAAIs"]
[Tue Sep 01 22:36:48.864599 2026] [:error] [pid 28194:tid 140353264895744] [client 4.205.62.107:53937] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/8.php"] [unique_id "apeZ0Adz-EN0cDNAEVKjsQAAAU4"]
[Tue Sep 01 22:36:50.231009 2026] [:error] [pid 28194:tid 140353452353280] [client 4.205.62.107:53915] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/thui.php"] [unique_id "apeZ0gdz-EN0cDNAEVKjsgAAAUA"]
[Tue Sep 01 22:36:51.512620 2026] [:error] [pid 29615:tid 140353357215488] [client 4.205.62.107:53933] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public/mah.php.php"] [unique_id "apeZ051PBa8fnDJM-t4eYQAAAgM"]
[Tue Sep 01 22:36:52.807165 2026] [:error] [pid 6089:tid 140353435567872] [client 4.205.62.107:58896] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kedi.php"] [unique_id "apeZ1JjeM2TaVrIYSc-hbwAAAAI"]
[Tue Sep 01 22:36:54.171275 2026] [:error] [pid 6091:tid 140353340430080] [client 4.205.62.107:19853] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/u88.php"] [unique_id "apeZ1skVYOXruxV21N6B1AAAAIU"]
[Tue Sep 01 22:36:55.423875 2026] [:error] [pid 6089:tid 140353315251968] [client 4.205.62.107:58771] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/rum.or.php"] [unique_id "apeZ15jeM2TaVrIYSc-hcQAAAAg"]
[Tue Sep 01 22:36:56.740757 2026] [:error] [pid 29615:tid 140353264895744] [client 4.205.62.107:19895] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpsysinfo.php"] [unique_id "apeZ2J1PBa8fnDJM-t4eYgAAAg4"]
[Tue Sep 01 22:36:57.992459 2026] [:error] [pid 6090:tid 140353222932224] [client 4.205.62.107:58906] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wdf.php"] [unique_id "apeZ2bPf1VxWhFqgvWtp6AAAAFM"]
[Tue Sep 01 22:36:59.226713 2026] [:error] [pid 28500:tid 140353206146816] [client 4.205.62.107:53779] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/maxro.php"] [unique_id "apeZ2zQYUm0S3Gh9Jn9_uAAAAZU"]
[Tue Sep 01 22:37:01.581828 2026] [:error] [pid 6090:tid 140353443960576] [client 4.205.62.107:53914] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/loxi-o.php"] [unique_id "apeZ3bPf1VxWhFqgvWtp6gAAAEE"]
[Tue Sep 01 22:37:02.838708 2026] [:error] [pid 29615:tid 140353348822784] [client 4.205.62.107:58752] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/rpk.php"] [unique_id "apeZ3p1PBa8fnDJM-t4eZQAAAgQ"]
[Tue Sep 01 22:37:04.082809 2026] [:error] [pid 6091:tid 140353315251968] [client 4.205.62.107:19886] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sgd.php"] [unique_id "apeZ4MkVYOXruxV21N6CIAAAAIg"]
[Tue Sep 01 22:37:06.138435 2026] [:error] [pid 6089:tid 140353357215488] [client 4.205.62.107:19888] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/tinyfilemanager.php"] [unique_id "apeZ4pjeM2TaVrIYSc-hgwAAAAM"]
[Tue Sep 01 22:57:17.486947 2026] [:error] [pid 29730:tid 140353435567872] [client 1.14.110.85:42362] [client 1.14.110.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apeenUKKsXadAWpiFbs4ywAAAkI"]
[Tue Sep 01 23:22:01.877379 2026] [authz_core:error] [pid 11529:tid 140353239717632] [client 192.145.125.92:44888] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Wed Sep 02 00:41:23.355217 2026] [proxy_fcgi:error] [pid 6411:tid 140353348822784] [client 181.191.141.172:38758] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 00:42:21.225984 2026] [proxy_fcgi:error] [pid 28194:tid 140353214539520] [client 62.60.130.142:64033] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Wed Sep 02 00:42:21.335614 2026] [proxy_fcgi:error] [pid 6411:tid 140353189361408] [client 62.60.130.142:50550] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 00:57:48.647326 2026] [proxy_fcgi:error] [pid 28194:tid 140353332037376] [client 69.6.222.143:37318] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:21:08.223926 2026] [authz_core:error] [pid 28500:tid 140353306859264] [client 103.87.77.130:52688] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Wed Sep 02 01:41:42.991759 2026] [proxy_fcgi:error] [pid 28194:tid 140353435567872] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:43.099526 2026] [proxy_fcgi:error] [pid 28194:tid 140353306859264] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:43.204948 2026] [proxy_fcgi:error] [pid 28194:tid 140353298466560] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:43.324072 2026] [proxy_fcgi:error] [pid 28194:tid 140353239717632] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:43.429948 2026] [proxy_fcgi:error] [pid 28194:tid 140353197754112] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:43.537390 2026] [proxy_fcgi:error] [pid 28194:tid 140353452353280] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:43.642870 2026] [proxy_fcgi:error] [pid 28194:tid 140353323644672] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:43.747166 2026] [proxy_fcgi:error] [pid 28194:tid 140353281681152] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:43.851786 2026] [proxy_fcgi:error] [pid 28194:tid 140353348822784] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:43.956789 2026] [proxy_fcgi:error] [pid 28194:tid 140353214539520] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:44.062168 2026] [proxy_fcgi:error] [pid 28194:tid 140353256503040] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:44.168900 2026] [proxy_fcgi:error] [pid 28194:tid 140353273288448] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:44.274886 2026] [proxy_fcgi:error] [pid 28194:tid 140353290073856] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:44.379854 2026] [proxy_fcgi:error] [pid 28194:tid 140353357215488] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:44.484787 2026] [proxy_fcgi:error] [pid 28194:tid 140353340430080] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:44.589944 2026] [proxy_fcgi:error] [pid 28194:tid 140353231324928] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:44.696013 2026] [proxy_fcgi:error] [pid 28194:tid 140353222932224] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:44.801138 2026] [proxy_fcgi:error] [pid 28194:tid 140353189361408] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:44.908646 2026] [proxy_fcgi:error] [pid 28194:tid 140353248110336] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:45.013758 2026] [proxy_fcgi:error] [pid 28194:tid 140353315251968] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:45.119174 2026] [proxy_fcgi:error] [pid 28194:tid 140353206146816] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:45.226426 2026] [proxy_fcgi:error] [pid 28194:tid 140353264895744] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:45.332964 2026] [proxy_fcgi:error] [pid 28194:tid 140353306859264] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:45.450451 2026] [proxy_fcgi:error] [pid 28194:tid 140353298466560] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:45.556769 2026] [proxy_fcgi:error] [pid 28194:tid 140353239717632] [client 52.139.44.162:61197] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 01:41:45.556907 2026] [:error] [pid 28194:tid 140353239717632] [client 52.139.44.162:61197] [client 52.139.44.162] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/file9.php"] [unique_id "apfFKQdz-EN0cDNAEVLNPAAAAVE"]
[Wed Sep 02 01:41:45.657959 2026] [:error] [pid 28194:tid 140353197754112] [client 52.139.44.162:61197] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file8.php"] [unique_id "apfFKQdz-EN0cDNAEVLNPQAAAVY"]
[Wed Sep 02 01:41:45.858237 2026] [:error] [pid 11529:tid 140353248110336] [client 52.139.44.162:52969] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file6.php"] [unique_id "apfFKS580fjDz1VV6yc6awAAAdA"]
[Wed Sep 02 01:41:46.064994 2026] [:error] [pid 9194:tid 140353206146816] [client 52.139.44.162:52937] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file4.php"] [unique_id "apfFKodqWCmIAB5WEG_hygAAARU"]
[Wed Sep 02 01:41:46.273477 2026] [:error] [pid 9194:tid 140353357215488] [client 52.139.44.162:52935] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/media.php"] [unique_id "apfFKodqWCmIAB5WEG_hzAAAAQM"]
[Wed Sep 02 01:41:46.481274 2026] [:error] [pid 6411:tid 140353180968704] [client 52.139.44.162:7490] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminfuns.php"] [unique_id "apfFKq-5XxGfLhlq8xmS7QAAANg"]
[Wed Sep 02 01:41:46.683178 2026] [:error] [pid 9194:tid 140353248110336] [client 52.139.44.162:52975] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/classwithtostring.php"] [unique_id "apfFKodqWCmIAB5WEG_hzwAAARA"]
[Wed Sep 02 01:41:46.882664 2026] [:error] [pid 9194:tid 140353332037376] [client 52.139.44.162:61219] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apfFKodqWCmIAB5WEG_h0AAAAQY"]
[Wed Sep 02 01:41:47.088196 2026] [:error] [pid 29615:tid 140353189361408] [client 52.139.44.162:61232] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apfFK51PBa8fnDJM-t4wpQAAAhc"]
[Wed Sep 02 01:41:47.294219 2026] [:error] [pid 29730:tid 140353256503040] [client 52.139.44.162:61207] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wsd.php"] [unique_id "apfFK0KKsXadAWpiFbtEYgAAAk8"]
[Wed Sep 02 01:41:47.505711 2026] [:error] [pid 9194:tid 140353222932224] [client 52.139.44.162:52957] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bulet.php"] [unique_id "apfFK4dqWCmIAB5WEG_h0gAAARM"]
[Wed Sep 02 01:41:47.718293 2026] [:error] [pid 11529:tid 140353348822784] [client 52.139.44.162:52951] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/av.php"] [unique_id "apfFKy580fjDz1VV6yc6bQAAAcQ"]
[Wed Sep 02 01:41:47.918378 2026] [:error] [pid 29730:tid 140353222932224] [client 52.139.44.162:61209] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/images.php"] [unique_id "apfFK0KKsXadAWpiFbtEYwAAAlM"]
[Wed Sep 02 01:41:48.126073 2026] [:error] [pid 6091:tid 140353180968704] [client 52.139.44.162:52940] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ops.php"] [unique_id "apfFLMkVYOXruxV21N6YHgAAAJg"]
[Wed Sep 02 01:41:48.328954 2026] [:error] [pid 11529:tid 140353323644672] [client 52.139.44.162:52932] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/BDKR28WP.php"] [unique_id "apfFLC580fjDz1VV6yc6bgAAAcc"]
[Wed Sep 02 01:41:48.540831 2026] [:error] [pid 9194:tid 140353206146816] [client 52.139.44.162:52959] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/k.php"] [unique_id "apfFLIdqWCmIAB5WEG_h1QAAARU"]
[Wed Sep 02 01:41:48.745170 2026] [:error] [pid 28500:tid 140353332037376] [client 52.139.44.162:61222] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dex.php"] [unique_id "apfFLDQYUm0S3Gh9Jn-fIQAAAYY"]
[Wed Sep 02 01:41:48.960920 2026] [:error] [pid 9194:tid 140353452353280] [client 52.139.44.162:61224] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/img.php"] [unique_id "apfFLIdqWCmIAB5WEG_h1gAAAQA"]
[Wed Sep 02 01:41:49.175301 2026] [:error] [pid 9194:tid 140353239717632] [client 52.139.44.162:61244] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/222.php"] [unique_id "apfFLYdqWCmIAB5WEG_h2AAAARE"]
[Wed Sep 02 01:41:49.387251 2026] [:error] [pid 28500:tid 140353256503040] [client 52.139.44.162:52960] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/key.php"] [unique_id "apfFLTQYUm0S3Gh9Jn-fIwAAAY8"]
[Wed Sep 02 01:41:49.596142 2026] [:error] [pid 29615:tid 140353332037376] [client 52.139.44.162:61229] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/chosen.php"] [unique_id "apfFLZ1PBa8fnDJM-t4wqgAAAgY"]
[Wed Sep 02 01:41:49.808058 2026] [:error] [pid 11529:tid 140353452353280] [client 52.139.44.162:61188] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file1221.php"] [unique_id "apfFLS580fjDz1VV6yc6bwAAAcA"]
[Wed Sep 02 01:41:50.012279 2026] [:error] [pid 6090:tid 140353248110336] [client 52.139.44.162:61195] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nox.php"] [unique_id "apfFLrPf1VxWhFqgvWt9BQAAAFA"]
[Wed Sep 02 01:41:50.215607 2026] [:error] [pid 28500:tid 140353206146816] [client 52.139.44.162:52958] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/1.php"] [unique_id "apfFLjQYUm0S3Gh9Jn-fJQAAAZU"]
[Wed Sep 02 01:41:50.424446 2026] [:error] [pid 9194:tid 140353306859264] [client 52.139.44.162:7517] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/m.php"] [unique_id "apfFLodqWCmIAB5WEG_h2gAAAQk"]
[Wed Sep 02 01:41:50.632387 2026] [:error] [pid 28500:tid 140353197754112] [client 52.139.44.162:61203] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fling.php"] [unique_id "apfFLjQYUm0S3Gh9Jn-fJwAAAZY"]
[Wed Sep 02 01:41:50.836073 2026] [:error] [pid 28500:tid 140353239717632] [client 52.139.44.162:61221] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/btyuio.php"] [unique_id "apfFLjQYUm0S3Gh9Jn-fKAAAAZE"]
[Wed Sep 02 01:41:51.040422 2026] [:error] [pid 9194:tid 140353214539520] [client 52.139.44.162:61202] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dehnl.php"] [unique_id "apfFL4dqWCmIAB5WEG_h2wAAARQ"]
[Wed Sep 02 01:41:51.251232 2026] [:error] [pid 28194:tid 140353348822784] [client 52.139.44.162:52945] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zoo1.php"] [unique_id "apfFLwdz-EN0cDNAEVLNPwAAAUQ"]
[Wed Sep 02 01:41:51.466739 2026] [:error] [pid 29615:tid 140353348822784] [client 52.139.44.162:52979] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/radio.php"] [unique_id "apfFL51PBa8fnDJM-t4wrQAAAgQ"]
[Wed Sep 02 01:41:51.690717 2026] [:error] [pid 29615:tid 140353222932224] [client 52.139.44.162:61226] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/one.php"] [unique_id "apfFL51PBa8fnDJM-t4wrgAAAhM"]
[Wed Sep 02 01:41:51.899353 2026] [:error] [pid 29615:tid 140353306859264] [client 52.139.44.162:8128] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/504.php"] [unique_id "apfFL51PBa8fnDJM-t4wsAAAAgk"]
[Wed Sep 02 01:41:52.107677 2026] [:error] [pid 28194:tid 140353332037376] [client 52.139.44.162:52942] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ano.php"] [unique_id "apfFMAdz-EN0cDNAEVLNQQAAAUY"]
[Wed Sep 02 01:41:52.318607 2026] [:error] [pid 9194:tid 140353435567872] [client 52.139.44.162:61200] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mac.php"] [unique_id "apfFMIdqWCmIAB5WEG_h3gAAAQI"]
[Wed Sep 02 01:41:52.525753 2026] [:error] [pid 9194:tid 140353189361408] [client 52.139.44.162:52989] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/simple.php"] [unique_id "apfFMIdqWCmIAB5WEG_h4AAAARc"]
[Wed Sep 02 01:41:52.731930 2026] [:error] [pid 29615:tid 140353231324928] [client 52.139.44.162:52947] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sallu.php"] [unique_id "apfFMJ1PBa8fnDJM-t4wsgAAAhI"]
[Wed Sep 02 01:41:52.935744 2026] [:error] [pid 9194:tid 140353298466560] [client 52.139.44.162:52939] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/biufile.php"] [unique_id "apfFMIdqWCmIAB5WEG_h4gAAAQo"]
[Wed Sep 02 01:41:53.161942 2026] [:error] [pid 9194:tid 140353239717632] [client 52.139.44.162:61189] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/blacks.php"] [unique_id "apfFMYdqWCmIAB5WEG_h4wAAARE"]
[Wed Sep 02 01:41:53.374019 2026] [:error] [pid 6411:tid 140353435567872] [client 52.139.44.162:61201] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp.php"] [unique_id "apfFMa-5XxGfLhlq8xmS8AAAAMI"]
[Wed Sep 02 01:41:53.578380 2026] [:error] [pid 28194:tid 140353357215488] [client 52.139.44.162:61231] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wander.php"] [unique_id "apfFMQdz-EN0cDNAEVLNQgAAAUM"]
[Wed Sep 02 01:41:53.790309 2026] [:error] [pid 28500:tid 140353306859264] [client 52.139.44.162:8143] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/abcd.php"] [unique_id "apfFMTQYUm0S3Gh9Jn-fKgAAAYk"]
[Wed Sep 02 01:41:54.001417 2026] [:error] [pid 6089:tid 140353443960576] [client 52.139.44.162:7527] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nofile.php"] [unique_id "apfFMpjeM2TaVrIYSc-17AAAAAE"]
[Wed Sep 02 01:41:54.206549 2026] [:error] [pid 6089:tid 140353248110336] [client 52.139.44.162:61237] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/run.php"] [unique_id "apfFMpjeM2TaVrIYSc-17gAAABA"]
[Wed Sep 02 01:41:54.411091 2026] [:error] [pid 29730:tid 140353298466560] [client 52.139.44.162:52962] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/new.php"] [unique_id "apfFMkKKsXadAWpiFbtEaAAAAko"]
[Wed Sep 02 01:41:54.619180 2026] [:error] [pid 9194:tid 140353248110336] [client 52.139.44.162:52971] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/vpn.php"] [unique_id "apfFModqWCmIAB5WEG_h5QAAARA"]
[Wed Sep 02 01:41:54.821067 2026] [:error] [pid 29615:tid 140353340430080] [client 52.139.44.162:7536] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/goods.php"] [unique_id "apfFMp1PBa8fnDJM-t4wtQAAAgU"]
[Wed Sep 02 01:41:55.025369 2026] [:error] [pid 29615:tid 140353290073856] [client 52.139.44.162:52934] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/alfa.php"] [unique_id "apfFM51PBa8fnDJM-t4wtgAAAgs"]
[Wed Sep 02 01:41:55.234338 2026] [:error] [pid 9194:tid 140353290073856] [client 52.139.44.162:61228] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/133.php"] [unique_id "apfFM4dqWCmIAB5WEG_h6AAAAQs"]
[Wed Sep 02 01:41:55.436288 2026] [:error] [pid 6089:tid 140353231324928] [client 52.139.44.162:7503] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sym.php"] [unique_id "apfFM5jeM2TaVrIYSc-18QAAABI"]
[Wed Sep 02 01:41:55.670493 2026] [:error] [pid 29730:tid 140353435567872] [client 52.139.44.162:61243] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/8.php"] [unique_id "apfFM0KKsXadAWpiFbtEagAAAkI"]
[Wed Sep 02 01:41:55.883295 2026] [:error] [pid 29730:tid 140353197754112] [client 52.139.44.162:61238] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws55.php"] [unique_id "apfFM0KKsXadAWpiFbtEawAAAlY"]
[Wed Sep 02 01:41:56.089488 2026] [:error] [pid 29615:tid 140353222932224] [client 52.139.44.162:52936] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/indo.php"] [unique_id "apfFNJ1PBa8fnDJM-t4wuQAAAhM"]
[Wed Sep 02 01:41:56.295981 2026] [:error] [pid 9194:tid 140353452353280] [client 52.139.44.162:52977] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wnnjpsby.php"] [unique_id "apfFNIdqWCmIAB5WEG_h7QAAAQA"]
[Wed Sep 02 01:41:56.507608 2026] [:error] [pid 9194:tid 140353231324928] [client 52.139.44.162:7512] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/info.php/new.php"] [unique_id "apfFNIdqWCmIAB5WEG_h8AAAARI"]
[Wed Sep 02 01:42:06.647236 2026] [:error] [pid 9194:tid 140353298466560] [client 52.139.44.162:61216] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/uploads/"] [unique_id "apfFPodqWCmIAB5WEG_h-gAAAQo"]
[Wed Sep 02 01:42:06.848171 2026] [:error] [pid 9194:tid 140353180968704] [client 52.139.44.162:61247] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/w.php"] [unique_id "apfFPodqWCmIAB5WEG_h-wAAARg"]
[Wed Sep 02 01:42:07.057302 2026] [:error] [pid 29615:tid 140353340430080] [client 52.139.44.162:61206] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dk.php"] [unique_id "apfFP51PBa8fnDJM-t4wwQAAAgU"]
[Wed Sep 02 01:42:07.263040 2026] [:error] [pid 6089:tid 140353248110336] [client 52.139.44.162:8168] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xc.php"] [unique_id "apfFP5jeM2TaVrIYSc-1-AAAABA"]
[Wed Sep 02 01:42:07.464843 2026] [:error] [pid 6091:tid 140353281681152] [client 52.139.44.162:52991] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dev.php"] [unique_id "apfFP8kVYOXruxV21N6YKAAAAIw"]
[Wed Sep 02 01:42:07.675956 2026] [:error] [pid 29730:tid 140353214539520] [client 52.139.44.162:61225] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp_blog_footer.php"] [unique_id "apfFP0KKsXadAWpiFbtEfAAAAlQ"]
[Wed Sep 02 01:42:07.875840 2026] [:error] [pid 9194:tid 140353256503040] [client 52.139.44.162:61227] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wefile.php"] [unique_id "apfFP4dqWCmIAB5WEG_h_QAAAQ8"]
[Wed Sep 02 01:42:08.078150 2026] [:error] [pid 6089:tid 140353264895744] [client 52.139.44.162:52985] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-load.php"] [unique_id "apfFQJjeM2TaVrIYSc-1-QAAAA4"]
[Wed Sep 02 01:42:08.292533 2026] [:error] [pid 6089:tid 140353332037376] [client 52.139.44.162:61246] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/robot.php"] [unique_id "apfFQJjeM2TaVrIYSc-1-gAAAAY"]
[Wed Sep 02 01:42:08.500475 2026] [:error] [pid 29615:tid 140353348822784] [client 52.139.44.162:52944] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sss.php"] [unique_id "apfFQJ1PBa8fnDJM-t4wxAAAAgQ"]
[Wed Sep 02 01:42:08.706878 2026] [:error] [pid 29615:tid 140353306859264] [client 52.139.44.162:52983] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xmini4.php"] [unique_id "apfFQJ1PBa8fnDJM-t4wxgAAAgk"]
[Wed Sep 02 01:42:08.907978 2026] [:error] [pid 28500:tid 140353239717632] [client 52.139.44.162:52950] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gulu.php"] [unique_id "apfFQDQYUm0S3Gh9Jn-fMwAAAZE"]
[Wed Sep 02 01:42:09.117238 2026] [:error] [pid 9194:tid 140353340430080] [client 52.139.44.162:61193] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/replace.php"] [unique_id "apfFQYdqWCmIAB5WEG_iAgAAAQU"]
[Wed Sep 02 01:42:09.329369 2026] [:error] [pid 9194:tid 140353298466560] [client 52.139.44.162:52933] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/c4.php"] [unique_id "apfFQYdqWCmIAB5WEG_iAwAAAQo"]
[Wed Sep 02 01:42:09.544345 2026] [:error] [pid 29730:tid 140353264895744] [client 52.139.44.162:7516] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/rxr.php"] [unique_id "apfFQUKKsXadAWpiFbtEgQAAAk4"]
[Wed Sep 02 01:42:09.749616 2026] [:error] [pid 9194:tid 140353264895744] [client 52.139.44.162:52964] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/reviall.php"] [unique_id "apfFQYdqWCmIAB5WEG_iBgAAAQ4"]
[Wed Sep 02 01:42:09.952882 2026] [:error] [pid 29615:tid 140353248110336] [client 52.139.44.162:61239] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/os.php"] [unique_id "apfFQZ1PBa8fnDJM-t4wyQAAAhA"]
[Wed Sep 02 01:42:10.161950 2026] [:error] [pid 9194:tid 140353306859264] [client 52.139.44.162:61191] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/44.php"] [unique_id "apfFQodqWCmIAB5WEG_iCAAAAQk"]
[Wed Sep 02 01:42:10.373781 2026] [:error] [pid 29730:tid 140353239717632] [client 52.139.44.162:61184] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ant.php"] [unique_id "apfFQkKKsXadAWpiFbtEgwAAAlE"]
[Wed Sep 02 01:42:10.584614 2026] [:error] [pid 29615:tid 140353256503040] [client 52.139.44.162:7996] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mari.php"] [unique_id "apfFQp1PBa8fnDJM-t4wywAAAg8"]
[Wed Sep 02 01:42:10.789773 2026] [:error] [pid 29615:tid 140353264895744] [client 52.139.44.162:52984] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bp.php"] [unique_id "apfFQp1PBa8fnDJM-t4wzAAAAg4"]
[Wed Sep 02 01:42:11.005815 2026] [:error] [pid 28194:tid 140353214539520] [client 52.139.44.162:61235] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file61.php"] [unique_id "apfFQwdz-EN0cDNAEVLNSwAAAVQ"]
[Wed Sep 02 01:42:11.209362 2026] [:error] [pid 29730:tid 140353306859264] [client 52.139.44.162:8142] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file59.php"] [unique_id "apfFQ0KKsXadAWpiFbtEhAAAAkk"]
[Wed Sep 02 01:42:11.426215 2026] [:error] [pid 9194:tid 140353290073856] [client 52.139.44.162:61245] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ded.php"] [unique_id "apfFQ4dqWCmIAB5WEG_iCgAAAQs"]
[Wed Sep 02 01:45:37.579310 2026] [:error] [pid 29615:tid 140353239717632] [client 43.166.224.244:46490] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apfGEZ1PBa8fnDJM-t4yOAAAAhE"]
[Wed Sep 02 01:49:03.200247 2026] [proxy_fcgi:error] [pid 6411:tid 140353189361408] [client 145.239.10.137:35298] AH01071: Got error 'Primary script unknown', referer: http://pesema.com/fleen.php
[Wed Sep 02 02:05:55.911006 2026] [proxy_fcgi:error] [pid 29615:tid 140353290073856] [client 145.239.10.137:44476] AH01071: Got error 'Primary script unknown', referer: http://pesema.com/admin.php
[Wed Sep 02 02:27:49.313310 2026] [:error] [pid 29615:tid 140353281681152] [client 43.156.36.169:37316] [client 43.156.36.169] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apfP9Z1PBa8fnDJM-t46igAAAgw"]
[Wed Sep 02 02:30:51.073343 2026] [proxy_fcgi:error] [pid 9194:tid 140353256503040] [client 145.239.10.137:56629] AH01071: Got error 'Primary script unknown', referer: http://pesema.com/mah.php?p=
[Wed Sep 02 02:34:12.467876 2026] [proxy_fcgi:error] [pid 9194:tid 140353197754112] [client 145.239.10.137:37073] AH01071: Got error 'Primary script unknown', referer: http://pesema.com/autoload_classmap.php
[Wed Sep 02 02:52:52.546226 2026] [proxy_fcgi:error] [pid 29730:tid 140353323644672] [client 138.68.22.184:48980] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 03:48:07.255535 2026] [proxy_fcgi:error] [pid 13378:tid 140628193900288] [client 58.227.42.166:49650] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 03:54:12.394591 2026] [proxy_fcgi:error] [pid 13065:tid 140628202292992] [client 150.95.80.80:38608] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:09:58.776221 2026] [:error] [pid 13064:tid 140628100904704] [client 43.136.86.241:37146] [client 43.136.86.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apfn5mO4FfejT6BQfS4cYwAAAIc"]
[Wed Sep 02 04:26:44.348072 2026] [proxy_fcgi:error] [pid 13065:tid 140628067333888] [client 104.131.101.134:40912] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:49:44.832301 2026] [proxy_fcgi:error] [pid 13062:tid 140628033763072] [client 159.89.149.162:48764] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 05:04:53.388417 2026] [authz_core:error] [pid 24762:tid 140628008584960] [client 207.154.197.113:52758] AH01630: client denied by server configuration: /home/pesema/public_html/server-status
[Wed Sep 02 05:05:20.889273 2026] [:error] [pid 13065:tid 140628058941184] [client 207.154.197.113:38168] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env"] [unique_id "apf04MLa7rlBbtzQAsj0YAAAAMw"]
[Wed Sep 02 05:05:25.257344 2026] [:error] [pid 24762:tid 140628058941184] [client 207.154.197.113:38184] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "apf05UvOhgfvInIzUv85QwAAAAw"]
[Wed Sep 02 05:05:32.544825 2026] [:error] [pid 24762:tid 140628084119296] [client 207.154.197.113:52822] [client 207.154.197.113] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.pesema.com"] [uri "/config.json"] [unique_id "apf07EvOhgfvInIzUv85UAAAAAk"]
[Wed Sep 02 05:05:34.322876 2026] [:error] [pid 13065:tid 140627958228736] [client 207.154.197.113:52832] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/telescope/requests"] [unique_id "apf07sLa7rlBbtzQAsj0ZAAAANg"]
[Wed Sep 02 05:05:35.825553 2026] [:error] [pid 24762:tid 140628000192256] [client 207.154.197.113:52836] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "apf070vOhgfvInIzUv85VQAAABM"]
[Wed Sep 02 05:05:36.650895 2026] [:error] [pid 13378:tid 140627966621440] [client 207.154.197.113:50150] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/info.php"] [unique_id "apf08BZ2kcN90LY1LU_-SwAAARc"]
[Wed Sep 02 05:05:38.023150 2026] [:error] [pid 13378:tid 140628042155776] [client 207.154.197.113:50158] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/.well-known/security.txt"] [unique_id "apf08hZ2kcN90LY1LU_-TQAAAQ4"]
[Wed Sep 02 05:05:39.510430 2026] [:error] [pid 13062:tid 140627958228736] [client 207.154.197.113:50174] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/actuator/env"] [unique_id "apf08883Jzm6fcsTqfE6LgAAAFg"]
[Wed Sep 02 05:05:40.345386 2026] [:error] [pid 13062:tid 140627991799552] [client 207.154.197.113:50178] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/trace.axd"] [unique_id "apf09M83Jzm6fcsTqfE6LwAAAFQ"]
[Wed Sep 02 05:05:41.716984 2026] [:error] [pid 13062:tid 140627966621440] [client 207.154.197.113:50182] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/@vite/env"] [unique_id "apf09c83Jzm6fcsTqfE6MQAAAFc"]
[Wed Sep 02 05:05:42.584139 2026] [:error] [pid 13065:tid 140628092512000] [client 207.154.197.113:50192] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/.vscode/sftp.json"] [unique_id "apf09sLa7rlBbtzQAsj0ZgAAAMg"]
[Wed Sep 02 05:05:44.069329 2026] [:error] [pid 24762:tid 140628084119296] [client 207.154.197.113:50202] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apf0-EvOhgfvInIzUv85XgAAAAk"]
[Wed Sep 02 05:05:45.503014 2026] [:error] [pid 24762:tid 140627991799552] [client 207.154.197.113:50208] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apf0-UvOhgfvInIzUv85YgAAABQ"]
[Wed Sep 02 05:05:46.719226 2026] [:error] [pid 13062:tid 140628008584960] [client 207.154.197.113:46070] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/debug/default/view"] [unique_id "apf0-s83Jzm6fcsTqfE6NAAAAFI"]
[Wed Sep 02 05:27:07.150660 2026] [proxy_fcgi:error] [pid 13065:tid 140628050548480] [client 162.240.100.208:41440] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 05:33:03.676523 2026] [:error] [pid 13065:tid 140627983406848] [client 34.92.51.71:45560] [client 34.92.51.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "apf7X8La7rlBbtzQAsj5vgAAANU"]
[Wed Sep 02 05:57:29.204611 2026] [:error] [pid 13064:tid 140628000192256] [client 43.153.15.51:45438] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apgBGWO4FfejT6BQfS4vPQAAAJM"]
[Wed Sep 02 06:46:47.753127 2026] [:error] [pid 13378:tid 140627958228736] [client 43.165.7.74:59402] [client 43.165.7.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apgMpxZ2kcN90LY1LU8WaQAAARg"]
[Wed Sep 02 06:48:33.513653 2026] [proxy_fcgi:error] [pid 24762:tid 140628193900288] [client 188.213.202.19:53803] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 07:13:31.230911 2026] [proxy_fcgi:error] [pid 13062:tid 140628084119296] [client 68.183.64.6:57190] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 07:28:17.258971 2026] [proxy_fcgi:error] [pid 13064:tid 140628008584960] [client 4.232.64.120:63626] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 07:45:54.190369 2026] [proxy_fcgi:error] [pid 13065:tid 140628025370368] [client 159.89.47.41:45442] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 08:42:00.782065 2026] [proxy_fcgi:error] [pid 13378:tid 140628210685696] [client 130.250.189.162:42980] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 08:52:09.383120 2026] [authz_core:error] [pid 13064:tid 140628202292992] [client 182.59.222.88:51414] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Wed Sep 02 09:26:19.347350 2026] [:error] [pid 13065:tid 140628100904704] [client 111.230.233.46:42798] [client 111.230.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apgyC8La7rlBbtzQAshGOgAAAMc"]
[Wed Sep 02 09:32:31.480384 2026] [proxy_fcgi:error] [pid 13378:tid 140627983406848] [client 134.122.25.0:45110] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 09:47:57.322155 2026] [authz_core:error] [pid 13378:tid 140627975014144] [client 159.223.132.86:47210] AH01630: client denied by server configuration: /home/pesema/public_html/server-status
[Wed Sep 02 09:48:07.681249 2026] [:error] [pid 26594:tid 140628177114880] [client 159.223.132.86:53744] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "apg3JxJhrV4fM-gqM1zW8wAAAUY"]
[Wed Sep 02 09:48:11.700031 2026] [:error] [pid 13065:tid 140628193900288] [client 159.223.132.86:53772] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "apg3K8La7rlBbtzQAshNzgAAAMQ"]
[Wed Sep 02 09:48:15.456565 2026] [:error] [pid 13065:tid 140628058941184] [client 159.223.132.86:59880] [client 159.223.132.86] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/config.json"] [unique_id "apg3L8La7rlBbtzQAshN2QAAAMw"]
[Wed Sep 02 09:48:17.451965 2026] [:error] [pid 13378:tid 140628185507584] [client 159.223.132.86:59882] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/telescope/requests"] [unique_id "apg3MRZ2kcN90LY1LU9AmgAAAQU"]
[Wed Sep 02 09:48:17.738353 2026] [:error] [pid 26594:tid 140628202292992] [client 159.223.132.86:59886] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "apg3MRJhrV4fM-gqM1zW_gAAAUM"]
[Wed Sep 02 09:48:18.743204 2026] [:error] [pid 13064:tid 140628067333888] [client 159.223.132.86:59894] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/info.php"] [unique_id "apg3MmO4FfejT6BQfS5c-wAAAIs"]
[Wed Sep 02 09:48:19.741754 2026] [:error] [pid 13062:tid 140628202292992] [client 159.223.132.86:59896] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/.well-known/security.txt"] [unique_id "apg3M883Jzm6fcsTqfGGJgAAAEM"]
[Wed Sep 02 09:48:20.746779 2026] [:error] [pid 24762:tid 140628033763072] [client 159.223.132.86:59908] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/actuator/env"] [unique_id "apg3NEvOhgfvInIzUv9-ywAAAA8"]
[Wed Sep 02 09:48:21.743897 2026] [:error] [pid 24762:tid 140628084119296] [client 159.223.132.86:59916] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/trace.axd"] [unique_id "apg3NUvOhgfvInIzUv9-zQAAAAk"]
[Wed Sep 02 09:48:22.762168 2026] [:error] [pid 24762:tid 140628092512000] [client 159.223.132.86:59918] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/@vite/env"] [unique_id "apg3NkvOhgfvInIzUv9-zwAAAAg"]
[Wed Sep 02 09:48:23.759420 2026] [:error] [pid 13064:tid 140628016977664] [client 159.223.132.86:59934] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/.vscode/sftp.json"] [unique_id "apg3N2O4FfejT6BQfS5dAQAAAJE"]
[Wed Sep 02 09:48:24.827285 2026] [:error] [pid 26594:tid 140628058941184] [client 159.223.132.86:59944] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/"] [unique_id "apg3OBJhrV4fM-gqM1zXEgAAAUw"]
[Wed Sep 02 09:48:25.897686 2026] [:error] [pid 13062:tid 140628067333888] [client 159.223.132.86:51548] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/"] [unique_id "apg3Oc83Jzm6fcsTqfGGKgAAAEs"]
[Wed Sep 02 09:48:26.907506 2026] [:error] [pid 13378:tid 140628075726592] [client 159.223.132.86:51560] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/debug/default/view"] [unique_id "apg3OhZ2kcN90LY1LU9AnwAAAQo"]
[Wed Sep 02 09:56:18.610708 2026] [:error] [pid 13064:tid 140628219078400] [client 43.157.181.189:60322] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apg5EmO4FfejT6BQfS5hxQAAAIE"]
[Wed Sep 02 10:32:03.741501 2026] [proxy_fcgi:error] [pid 13065:tid 140628092512000] [client 87.106.32.238:46250] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 10:47:07.437948 2026] [proxy_fcgi:error] [pid 13378:tid 140627958228736] [client 67.205.170.93:43904] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 10:51:39.797869 2026] [:error] [pid 26594:tid 140628033763072] [client 162.62.132.25:42810] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "aphGCxJhrV4fM-gqM1zqJQAAAU8"]
[Wed Sep 02 10:53:18.461694 2026] [proxy_fcgi:error] [pid 13065:tid 140628042155776] [client 14.225.208.110:35590] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 11:07:03.563942 2026] [proxy_fcgi:error] [pid 13065:tid 140628008584960] [client 134.122.25.0:58964] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 11:48:53.138377 2026] [proxy_fcgi:error] [pid 13065:tid 140628092512000] [client 193.22.147.121:47218] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 12:22:59.265518 2026] [authz_core:error] [pid 13064:tid 140628193900288] [client 143.244.57.88:40716] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Wed Sep 02 12:32:43.683822 2026] [authz_core:error] [pid 13062:tid 140627966621440] [client 142.93.143.8:42776] AH01630: client denied by server configuration: /home/pesema/public_html/server-status
[Wed Sep 02 12:33:02.253782 2026] [:error] [pid 13062:tid 140628084119296] [client 142.93.143.8:44044] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "aphdzs83Jzm6fcsTqfGnogAAAEk"]
[Wed Sep 02 12:33:06.793040 2026] [:error] [pid 13062:tid 140628050548480] [client 142.93.143.8:45366] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "aphd0s83Jzm6fcsTqfGnrwAAAE0"]
[Wed Sep 02 12:33:16.065692 2026] [:error] [pid 13065:tid 140628058941184] [client 142.93.143.8:54906] [client 142.93.143.8] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/telescope/requests"] [unique_id "aphd3MLa7rlBbtzQAsiVuQAAAMw"]
[Wed Sep 02 12:33:16.770228 2026] [:error] [pid 26594:tid 140628033763072] [client 142.93.143.8:54908] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aphd3BJhrV4fM-gqM1wJjAAAAU8"]
[Wed Sep 02 12:33:17.843567 2026] [:error] [pid 13062:tid 140628008584960] [client 142.93.143.8:54914] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/info.php"] [unique_id "aphd3c83Jzm6fcsTqfGnwQAAAFI"]
[Wed Sep 02 12:33:19.588320 2026] [:error] [pid 24762:tid 140628025370368] [client 142.93.143.8:54922] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/.well-known/security.txt"] [unique_id "aphd30vOhgfvInIzUv-enwAAABA"]
[Wed Sep 02 12:33:20.222873 2026] [:error] [pid 13378:tid 140628227471104] [client 142.93.143.8:54938] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/actuator/env"] [unique_id "aphd4BZ2kcN90LY1LU9gQwAAAQA"]
[Wed Sep 02 12:33:21.374005 2026] [:error] [pid 13064:tid 140628042155776] [client 142.93.143.8:54940] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/trace.axd"] [unique_id "aphd4WO4FfejT6BQfS59qQAAAI4"]
[Wed Sep 02 12:33:22.386858 2026] [:error] [pid 13062:tid 140628050548480] [client 142.93.143.8:54948] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/@vite/env"] [unique_id "aphd4s83Jzm6fcsTqfGnyAAAAE0"]
[Wed Sep 02 12:33:23.415194 2026] [:error] [pid 24762:tid 140628185507584] [client 142.93.143.8:54956] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/.vscode/sftp.json"] [unique_id "aphd40vOhgfvInIzUv-eoQAAAAU"]
[Wed Sep 02 12:33:24.800395 2026] [:error] [pid 20352:tid 140628050548480] [client 142.93.143.8:54968] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/"] [unique_id "aphd5J053FhJIbNTB_9iVgAAAc0"]
[Wed Sep 02 12:33:25.505942 2026] [:error] [pid 13065:tid 140628075726592] [client 142.93.143.8:54972] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/"] [unique_id "aphd5cLa7rlBbtzQAsiVvwAAAMo"]
[Wed Sep 02 12:33:26.753268 2026] [:error] [pid 13378:tid 140627958228736] [client 142.93.143.8:46450] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/debug/default/view"] [unique_id "aphd5hZ2kcN90LY1LU9gSQAAARg"]
[Wed Sep 02 12:39:16.050683 2026] [proxy_fcgi:error] [pid 4787:tid 140628177114880] [client 157.230.238.225:57172] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:16.741618 2026] [proxy_fcgi:error] [pid 13378:tid 140628000192256] [client 20.104.81.161:1412] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:16.848883 2026] [proxy_fcgi:error] [pid 13378:tid 140628075726592] [client 20.104.81.161:1412] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:16.959890 2026] [proxy_fcgi:error] [pid 13378:tid 140627975014144] [client 20.104.81.161:1412] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:17.066347 2026] [proxy_fcgi:error] [pid 13378:tid 140628092512000] [client 20.104.81.161:1412] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:17.173618 2026] [proxy_fcgi:error] [pid 13378:tid 140628025370368] [client 20.104.81.161:1412] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:17.281209 2026] [proxy_fcgi:error] [pid 13378:tid 140628084119296] [client 20.104.81.161:1412] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:17.704221 2026] [proxy_fcgi:error] [pid 13378:tid 140627983406848] [client 20.104.81.161:1412] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:17.806087 2026] [:error] [pid 13378:tid 140628177114880] [client 20.104.81.161:1412] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(^|/)(\\\\.env($|[/?])|\\\\.git/|aw\\\\.php$|adminfuns\\\\.php$|xmrlpc\\\\.php$|unzipper\\\\.php$|alfa\\\\.php$|alfanew\\\\.php$)" at REQUEST_URI. [file "/usr/local/apache/conf.d/zzz-security-hardening.conf"] [line "26"] [id "110001"] [msg "CWP-Hardening: Scanner/webshell probe blocked"] [hostname "pesema.com"] [uri "/xmrlpc.php"] [unique_id "aphs3RZ2kcN90LY1LU9w_QAAAQY"]
[Wed Sep 02 13:37:18.328797 2026] [proxy_fcgi:error] [pid 13378:tid 140628067333888] [client 20.104.81.161:1441] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:18.434766 2026] [proxy_fcgi:error] [pid 13378:tid 140628008584960] [client 20.104.81.161:1441] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:18.540411 2026] [proxy_fcgi:error] [pid 13378:tid 140628202292992] [client 20.104.81.161:1441] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:18.646156 2026] [proxy_fcgi:error] [pid 13378:tid 140628100904704] [client 20.104.81.161:1441] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:18.752208 2026] [proxy_fcgi:error] [pid 13378:tid 140628000192256] [client 20.104.81.161:1441] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:18.857927 2026] [proxy_fcgi:error] [pid 13378:tid 140628075726592] [client 20.104.81.161:1441] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:18.964646 2026] [proxy_fcgi:error] [pid 13378:tid 140627975014144] [client 20.104.81.161:1441] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:19.280421 2026] [proxy_fcgi:error] [pid 13378:tid 140628084119296] [client 20.104.81.161:1441] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:19.386481 2026] [proxy_fcgi:error] [pid 13378:tid 140628193900288] [client 20.104.81.161:1441] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:19.493703 2026] [proxy_fcgi:error] [pid 13378:tid 140628227471104] [client 20.104.81.161:1441] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:19.599751 2026] [proxy_fcgi:error] [pid 13378:tid 140627983406848] [client 20.104.81.161:1441] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:19.812578 2026] [proxy_fcgi:error] [pid 13378:tid 140628058941184] [client 20.104.81.161:1441] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:37:19.812729 2026] [:error] [pid 13378:tid 140628058941184] [client 20.104.81.161:1441] [client 20.104.81.161] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/root.php"] [unique_id "aphs3xZ2kcN90LY1LU9xDwAAAQw"]
[Wed Sep 02 13:37:19.914049 2026] [:error] [pid 13378:tid 140627958228736] [client 20.104.81.161:1441] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/shell.php"] [unique_id "aphs3xZ2kcN90LY1LU9xEAAAARg"]
[Wed Sep 02 13:37:20.316371 2026] [:error] [pid 13062:tid 140628042155776] [client 20.104.81.161:58119] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/user/index.php"] [unique_id "aphs4M83Jzm6fcsTqfG-UgAAAE4"]
[Wed Sep 02 13:37:20.726366 2026] [:error] [pid 13378:tid 140628067333888] [client 20.104.81.161:51332] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-block.php"] [unique_id "aphs4BZ2kcN90LY1LU9xEgAAAQs"]
[Wed Sep 02 13:37:21.135834 2026] [:error] [pid 13062:tid 140628219078400] [client 20.104.81.161:64298] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "aphs4c83Jzm6fcsTqfG-UwAAAEE"]
[Wed Sep 02 13:37:21.545268 2026] [:error] [pid 13378:tid 140628100904704] [client 20.104.81.161:50262] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-header-json.php"] [unique_id "aphs4RZ2kcN90LY1LU9xFAAAAQc"]
[Wed Sep 02 13:37:21.955447 2026] [:error] [pid 13378:tid 140627991799552] [client 20.104.81.161:1709] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/index.php"] [unique_id "aphs4RZ2kcN90LY1LU9xFQAAARQ"]
[Wed Sep 02 13:37:22.366300 2026] [:error] [pid 26594:tid 140628100904704] [client 20.104.81.161:51371] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zup.php"] [unique_id "aphs4hJhrV4fM-gqM1wSygAAAUc"]
[Wed Sep 02 13:37:22.773108 2026] [:error] [pid 13065:tid 140628033763072] [client 20.104.81.161:56234] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a9.php"] [unique_id "aphs4sLa7rlBbtzQAsicxgAAAM8"]
[Wed Sep 02 13:37:23.175773 2026] [:error] [pid 13062:tid 140628100904704] [client 20.104.81.161:58134] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin/index.php"] [unique_id "aphs4883Jzm6fcsTqfG-VAAAAEc"]
[Wed Sep 02 13:37:23.577282 2026] [:error] [pid 13062:tid 140627975014144] [client 20.104.81.161:58137] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/content.php"] [unique_id "aphs4883Jzm6fcsTqfG-VgAAAFY"]
[Wed Sep 02 13:37:23.983470 2026] [:error] [pid 13378:tid 140628227471104] [client 20.104.81.161:58128] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gg.php"] [unique_id "aphs4xZ2kcN90LY1LU9xGAAAAQA"]
[Wed Sep 02 13:37:24.390992 2026] [:error] [pid 13062:tid 140628193900288] [client 20.104.81.161:51344] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/makeasmtp.php"] [unique_id "aphs5M83Jzm6fcsTqfG-VwAAAEQ"]
[Wed Sep 02 13:37:24.793825 2026] [:error] [pid 20352:tid 140627983406848] [client 20.104.81.161:1664] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/paku.php"] [unique_id "aphs5J053FhJIbNTB_9qngAAAdU"]
[Wed Sep 02 13:37:25.200069 2026] [:error] [pid 13062:tid 140628016977664] [client 20.104.81.161:63401] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/rtx.php"] [unique_id "aphs5c83Jzm6fcsTqfG-WAAAAFE"]
[Wed Sep 02 13:37:25.607401 2026] [:error] [pid 13378:tid 140628016977664] [client 20.104.81.161:64260] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/update/da222.php"] [unique_id "aphs5RZ2kcN90LY1LU9xHQAAARE"]
[Wed Sep 02 13:37:26.018413 2026] [:error] [pid 13062:tid 140628000192256] [client 20.104.81.161:51635] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/maint/"] [unique_id "aphs5s83Jzm6fcsTqfG-WgAAAFM"]
[Wed Sep 02 13:37:26.427489 2026] [:error] [pid 13065:tid 140628075726592] [client 20.104.81.161:1278] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/min.php"] [unique_id "aphs5sLa7rlBbtzQAsicxwAAAMo"]
[Wed Sep 02 13:37:26.835554 2026] [:error] [pid 13062:tid 140627958228736] [client 20.104.81.161:38986] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "aphs5s83Jzm6fcsTqfG-XQAAAFg"]
[Wed Sep 02 13:37:27.245092 2026] [:error] [pid 13062:tid 140628185507584] [client 20.104.81.161:35711] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/themes/min.php"] [unique_id "aphs5883Jzm6fcsTqfG-YAAAAEU"]
[Wed Sep 02 13:37:27.654249 2026] [:error] [pid 13062:tid 140628193900288] [client 20.104.81.161:35677] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "aphs5883Jzm6fcsTqfG-YgAAAEQ"]
[Wed Sep 02 13:37:28.060265 2026] [:error] [pid 13062:tid 140628075726592] [client 20.104.81.161:36036] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/images/media/"] [unique_id "aphs6M83Jzm6fcsTqfG-ZAAAAEo"]
[Wed Sep 02 13:37:28.464247 2026] [:error] [pid 13062:tid 140628042155776] [client 20.104.81.161:58662] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "aphs6M83Jzm6fcsTqfG-ZQAAAE4"]
[Wed Sep 02 13:37:28.867284 2026] [:error] [pid 13378:tid 140628042155776] [client 20.104.81.161:36488] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-info.php"] [unique_id "aphs6BZ2kcN90LY1LU9xIAAAAQ4"]
[Wed Sep 02 13:37:29.269386 2026] [:error] [pid 13378:tid 140627991799552] [client 20.104.81.161:37592] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-wordfence-waf.php"] [unique_id "aphs6RZ2kcN90LY1LU9xIQAAARQ"]
[Wed Sep 02 13:37:29.670552 2026] [:error] [pid 26594:tid 140627975014144] [client 20.104.81.161:37591] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws49.php"] [unique_id "aphs6RJhrV4fM-gqM1wSywAAAVY"]
[Wed Sep 02 13:37:30.082150 2026] [:error] [pid 13378:tid 140628177114880] [client 20.104.81.161:36965] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xxx.php"] [unique_id "aphs6hZ2kcN90LY1LU9xIwAAAQY"]
[Wed Sep 02 13:37:30.490030 2026] [:error] [pid 4787:tid 140627958228736] [client 20.104.81.161:37615] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/0x.php"] [unique_id "aphs6oDtrMyUDBUw4k2rbQAAAZg"]
[Wed Sep 02 13:37:30.898353 2026] [:error] [pid 24762:tid 140628092512000] [client 20.104.81.161:58981] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/CDX1.php"] [unique_id "aphs6kvOhgfvInIzUv-pWgAAAAg"]
[Wed Sep 02 13:37:31.305356 2026] [:error] [pid 13062:tid 140628100904704] [client 20.104.81.161:34961] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/akcc.php"] [unique_id "aphs6883Jzm6fcsTqfG-aQAAAEc"]
[Wed Sep 02 13:37:31.708950 2026] [:error] [pid 26594:tid 140628042155776] [client 20.104.81.161:53126] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/control.php"] [unique_id "aphs6xJhrV4fM-gqM1wSzQAAAU4"]
[Wed Sep 02 13:37:32.108582 2026] [:error] [pid 26594:tid 140628058941184] [client 20.104.81.161:1986] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/images/"] [unique_id "aphs7BJhrV4fM-gqM1wSzgAAAUw"]
[Wed Sep 02 13:37:32.516616 2026] [:error] [pid 13062:tid 140628016977664] [client 20.104.81.161:58959] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "aphs7M83Jzm6fcsTqfG-bwAAAFE"]
[Wed Sep 02 13:37:32.925433 2026] [:error] [pid 26594:tid 140627966621440] [client 20.104.81.161:1996] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/s.php"] [unique_id "aphs7BJhrV4fM-gqM1wSzwAAAVc"]
[Wed Sep 02 13:37:33.334841 2026] [:error] [pid 26594:tid 140628210685696] [client 20.104.81.161:34993] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sagax.php"] [unique_id "aphs7RJhrV4fM-gqM1wS0QAAAUI"]
[Wed Sep 02 13:37:33.743197 2026] [:error] [pid 13378:tid 140628000192256] [client 20.104.81.161:1250] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/vendor/"] [unique_id "aphs7RZ2kcN90LY1LU9xKgAAARM"]
[Wed Sep 02 13:37:34.149676 2026] [:error] [pid 13062:tid 140628042155776] [client 20.104.81.161:1427] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/wp-teest.php"] [unique_id "aphs7s83Jzm6fcsTqfG-cQAAAE4"]
[Wed Sep 02 13:37:34.556596 2026] [:error] [pid 13062:tid 140627958228736] [client 20.104.81.161:1236] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "aphs7s83Jzm6fcsTqfG-cwAAAFg"]
[Wed Sep 02 13:37:34.968538 2026] [:error] [pid 13378:tid 140627991799552] [client 20.104.81.161:1433] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "aphs7hZ2kcN90LY1LU9xKwAAARQ"]
[Wed Sep 02 13:37:35.376735 2026] [:error] [pid 13062:tid 140628185507584] [client 20.104.81.161:41786] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aphs7883Jzm6fcsTqfG-dQAAAEU"]
[Wed Sep 02 13:37:35.783718 2026] [:error] [pid 13378:tid 140628227471104] [client 20.104.81.161:2012] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/z.php"] [unique_id "aphs7xZ2kcN90LY1LU9xLAAAAQA"]
[Wed Sep 02 13:37:36.198422 2026] [:error] [pid 13378:tid 140627966621440] [client 20.104.81.161:41401] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/f35.php"] [unique_id "aphs8BZ2kcN90LY1LU9xMAAAARc"]
[Wed Sep 02 13:37:36.607284 2026] [:error] [pid 13378:tid 140628219078400] [client 20.104.81.161:1867] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file61.php"] [unique_id "aphs8BZ2kcN90LY1LU9xMQAAAQE"]
[Wed Sep 02 13:37:37.016916 2026] [:error] [pid 13064:tid 140628016977664] [client 20.104.81.161:1255] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mah.php"] [unique_id "aphs8WO4FfejT6BQfS6FrwAAAJE"]
[Wed Sep 02 13:37:37.418441 2026] [:error] [pid 13378:tid 140628075726592] [client 20.104.81.161:60341] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mini.php"] [unique_id "aphs8RZ2kcN90LY1LU9xMgAAAQo"]
[Wed Sep 02 13:37:37.818538 2026] [:error] [pid 13062:tid 140628219078400] [client 20.104.81.161:1877] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/system_log.php"] [unique_id "aphs8c83Jzm6fcsTqfG-fQAAAEE"]
[Wed Sep 02 13:37:38.224339 2026] [:error] [pid 26594:tid 140628008584960] [client 20.104.81.161:1882] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/v.php"] [unique_id "aphs8hJhrV4fM-gqM1wS0gAAAVI"]
[Wed Sep 02 13:37:38.630953 2026] [:error] [pid 4787:tid 140628100904704] [client 20.104.81.161:1217] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/colors/"] [unique_id "aphs8oDtrMyUDBUw4k2rbwAAAYc"]
[Wed Sep 02 13:37:39.035908 2026] [:error] [pid 13062:tid 140628227471104] [client 20.104.81.161:1764] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aphs8883Jzm6fcsTqfG-gAAAAEA"]
[Wed Sep 02 13:37:39.447054 2026] [:error] [pid 13378:tid 140628202292992] [client 20.104.81.161:35253] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aphs8xZ2kcN90LY1LU9xNAAAAQM"]
[Wed Sep 02 13:37:39.851332 2026] [:error] [pid 13378:tid 140628227471104] [client 20.104.81.161:38129] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aphs8xZ2kcN90LY1LU9xNQAAAQA"]
[Wed Sep 02 13:37:40.253255 2026] [:error] [pid 20352:tid 140628227471104] [client 20.104.81.161:41367] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aphs9J053FhJIbNTB_9qoAAAAcA"]
[Wed Sep 02 13:37:40.657748 2026] [:error] [pid 24762:tid 140628100904704] [client 20.104.81.161:36066] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-index.php"] [unique_id "aphs9EvOhgfvInIzUv-pXwAAAAc"]
[Wed Sep 02 13:37:41.063614 2026] [:error] [pid 13378:tid 140628067333888] [client 20.104.81.161:38101] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/wp-admin/includes/"] [unique_id "aphs9RZ2kcN90LY1LU9xNwAAAQs"]
[Wed Sep 02 13:37:41.467156 2026] [:error] [pid 13062:tid 140628042155776] [client 20.104.81.161:38133] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws80.php"] [unique_id "aphs9c83Jzm6fcsTqfG-hQAAAE4"]
[Wed Sep 02 13:37:41.873544 2026] [:error] [pid 13065:tid 140627958228736] [client 20.104.81.161:36091] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ww2.php"] [unique_id "aphs9cLa7rlBbtzQAsicyAAAANg"]
[Wed Sep 02 13:37:42.279141 2026] [:error] [pid 13378:tid 140628042155776] [client 20.104.81.161:38092] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/7logs.php"] [unique_id "aphs9hZ2kcN90LY1LU9xOgAAAQ4"]
[Wed Sep 02 13:37:42.679962 2026] [:error] [pid 13378:tid 140628100904704] [client 20.104.81.161:1703] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ac.php"] [unique_id "aphs9hZ2kcN90LY1LU9xOwAAAQc"]
[Wed Sep 02 13:37:43.081180 2026] [:error] [pid 13378:tid 140628025370368] [client 20.104.81.161:38142] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/assets/images/doc.php"] [unique_id "aphs9xZ2kcN90LY1LU9xPAAAARA"]
[Wed Sep 02 13:37:43.480982 2026] [:error] [pid 24762:tid 140628000192256] [client 20.104.81.161:58028] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ctex1.php"] [unique_id "aphs90vOhgfvInIzUv-pYQAAABM"]
[Wed Sep 02 13:37:43.889125 2026] [:error] [pid 13062:tid 140628067333888] [client 20.104.81.161:58024] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/defaults.php"] [unique_id "aphs9883Jzm6fcsTqfG-hgAAAEs"]
[Wed Sep 02 13:37:44.292471 2026] [:error] [pid 20352:tid 140628042155776] [client 20.104.81.161:52549] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/domains.php"] [unique_id "aphs-J053FhJIbNTB_9qoQAAAc4"]
[Wed Sep 02 13:37:44.702122 2026] [:error] [pid 20352:tid 140627991799552] [client 20.104.81.161:52565] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dropdown.php"] [unique_id "aphs-J053FhJIbNTB_9qogAAAdQ"]
[Wed Sep 02 13:37:45.103349 2026] [:error] [pid 13378:tid 140628227471104] [client 20.104.81.161:35665] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/files/index.php"] [unique_id "aphs-RZ2kcN90LY1LU9xPgAAAQA"]
[Wed Sep 02 13:37:45.509867 2026] [:error] [pid 13378:tid 140627991799552] [client 20.104.81.161:50240] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/flower.php"] [unique_id "aphs-RZ2kcN90LY1LU9xQAAAARQ"]
[Wed Sep 02 13:37:45.913015 2026] [:error] [pid 13378:tid 140627958228736] [client 20.104.81.161:60802] [client 20.104.81.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/insc.php"] [unique_id "aphs-RZ2kcN90LY1LU9xQQAAARg"]
[Wed Sep 02 14:20:27.634952 2026] [proxy_fcgi:error] [pid 26330:tid 139841678874368] [client 116.202.114.227:35212] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 14:43:17.110044 2026] [authz_core:error] [pid 26635:tid 139841467520768] [client 74.7.242.19:54636] AH01630: client denied by server configuration: /home/pesema/public_html/
[Wed Sep 02 14:44:13.271952 2026] [:error] [pid 26425:tid 139841662088960] [client 139.155.134.17:35704] [client 139.155.134.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "aph8jZTjDDmEYNdvNHXHfgAAAMI"]
[Wed Sep 02 15:56:44.701115 2026] [proxy_fcgi:error] [pid 2377:tid 140111605876480] [client 193.22.147.121:45464] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 16:26:00.879855 2026] [:error] [pid 3740:tid 140111664625408] [client 43.161.234.148:47796] [client 43.161.234.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apiUaNHHyMPjflUDIYz5dgAAAcQ"]
[Wed Sep 02 17:00:33.964723 2026] [proxy_fcgi:error] [pid 1073:tid 139877060396800] [client 150.95.80.80:43422] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 17:00:34.681724 2026] [proxy_fcgi:error] [pid 903:tid 139877052004096] [client 150.95.80.80:45406] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 17:01:22.499031 2026] [authz_core:error] [pid 903:tid 139877026825984] [client 74.50.65.46:47010] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Wed Sep 02 17:20:39.997678 2026] [:error] [pid 1073:tid 139877135931136] [client 85.11.167.104:46458] [client 85.11.167.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "apihN1aa_Qo7NvRGH-CFEQAAAUY"]
[Wed Sep 02 17:33:51.912297 2026] [:error] [pid 903:tid 139877026825984] [client 49.51.47.100:56846] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apikT6_SfnohFj1ZkMESwwAAAFM"]
[Wed Sep 02 18:05:57.230130 2026] [proxy_fcgi:error] [pid 1149:tid 139877018433280] [client 219.94.248.179:56214] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:40.071180 2026] [proxy_fcgi:error] [pid 1024:tid 139877127538432] [client 20.48.250.41:44002] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:41.433295 2026] [proxy_fcgi:error] [pid 1072:tid 139877257299712] [client 20.48.250.41:44015] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:42.656153 2026] [proxy_fcgi:error] [pid 1072:tid 139877035218688] [client 20.48.250.41:44011] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:46.378974 2026] [proxy_fcgi:error] [pid 1149:tid 139877110753024] [client 20.48.250.41:44024] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:47.615839 2026] [proxy_fcgi:error] [pid 1149:tid 139877135931136] [client 20.48.250.41:44021] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:48.841176 2026] [proxy_fcgi:error] [pid 1024:tid 139877068789504] [client 20.48.250.41:43965] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:50.051463 2026] [proxy_fcgi:error] [pid 1024:tid 139877035218688] [client 20.48.250.41:43974] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:52.517485 2026] [proxy_fcgi:error] [pid 902:tid 139877127538432] [client 20.48.250.41:43968] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:53.741607 2026] [proxy_fcgi:error] [pid 1072:tid 139877093967616] [client 20.48.250.41:43976] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:54.960330 2026] [proxy_fcgi:error] [pid 1073:tid 139877085574912] [client 20.48.250.41:43914] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:56.192116 2026] [proxy_fcgi:error] [pid 1149:tid 139877077182208] [client 20.48.250.41:43846] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:58.653094 2026] [proxy_fcgi:error] [pid 1150:tid 139877052004096] [client 20.48.250.41:44008] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:58:59.882211 2026] [proxy_fcgi:error] [pid 1149:tid 139877248907008] [client 20.48.250.41:43924] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:59:01.121454 2026] [proxy_fcgi:error] [pid 1149:tid 139877093967616] [client 20.48.250.41:43912] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:59:03.588312 2026] [proxy_fcgi:error] [pid 1072:tid 139877085574912] [client 20.48.250.41:44010] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:59:04.808994 2026] [proxy_fcgi:error] [pid 1149:tid 139877060396800] [client 20.48.250.41:44019] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:59:06.040056 2026] [proxy_fcgi:error] [pid 902:tid 139877010040576] [client 20.48.250.41:43973] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:59:08.517339 2026] [proxy_fcgi:error] [pid 1149:tid 139877110753024] [client 20.48.250.41:43999] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 18:59:09.798072 2026] [:error] [pid 1150:tid 139877135931136] [client 20.48.250.41:44029] [client 20.48.250.41] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/wp-content/aws.php"] [unique_id "api4TVandIN96G83sQa24wAAAcY"]
[Wed Sep 02 18:59:11.035518 2026] [:error] [pid 1149:tid 139876993255168] [client 20.48.250.41:43918] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/info_php.php"] [unique_id "api4T-5-Dlx-kBq1C1D90gAAAZc"]
[Wed Sep 02 18:59:12.258260 2026] [:error] [pid 902:tid 139877257299712] [client 20.48.250.41:43960] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/error.php"] [unique_id "api4UHD3UfRyd6VRADI4gwAAAAA"]
[Wed Sep 02 18:59:13.485028 2026] [:error] [pid 902:tid 139877152716544] [client 20.48.250.41:43928] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sallu.php"] [unique_id "api4UXD3UfRyd6VRADI4hQAAAAQ"]
[Wed Sep 02 18:59:14.688660 2026] [:error] [pid 1073:tid 139877077182208] [client 20.48.250.41:44013] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xa.php"] [unique_id "api4Ulaa_Qo7NvRGH-CxgQAAAU0"]
[Wed Sep 02 18:59:15.900396 2026] [:error] [pid 1072:tid 139877010040576] [client 20.48.250.41:44007] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/palsy.php"] [unique_id "api4U1Sr6Dum30GCXcSzcQAAARU"]
[Wed Sep 02 18:59:17.114876 2026] [:error] [pid 1150:tid 139877110753024] [client 20.48.250.41:44026] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bgymj.php"] [unique_id "api4VVandIN96G83sQa25QAAAck"]
[Wed Sep 02 18:59:18.332588 2026] [:error] [pid 1149:tid 139877060396800] [client 20.48.250.41:43920] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/tx79.php"] [unique_id "api4Vu5-Dlx-kBq1C1D92gAAAY8"]
[Wed Sep 02 18:59:19.550616 2026] [:error] [pid 1149:tid 139877043611392] [client 20.48.250.41:43916] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/an7.php"] [unique_id "api4V-5-Dlx-kBq1C1D93wAAAZE"]
[Wed Sep 02 18:59:20.770117 2026] [:error] [pid 902:tid 139877060396800] [client 20.48.250.41:43926] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "api4WHD3UfRyd6VRADI4kQAAAA8"]
[Wed Sep 02 18:59:21.986499 2026] [:error] [pid 902:tid 139877001647872] [client 20.48.250.41:43991] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/4563.php"] [unique_id "api4WXD3UfRyd6VRADI4lAAAABY"]
[Wed Sep 02 18:59:23.201289 2026] [:error] [pid 902:tid 139877232121600] [client 20.48.250.41:43910] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/about/function.php"] [unique_id "api4W3D3UfRyd6VRADI4mgAAAAM"]
[Wed Sep 02 18:59:24.461939 2026] [:error] [pid 903:tid 139877135931136] [client 20.48.250.41:44018] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hmcyt.php"] [unique_id "api4XK_SfnohFj1ZkMFA_wAAAEY"]
[Wed Sep 02 18:59:25.685664 2026] [:error] [pid 1149:tid 139877110753024] [client 20.48.250.41:43942] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/tithings.php"] [unique_id "api4Xe5-Dlx-kBq1C1D96wAAAYk"]
[Wed Sep 02 18:59:26.907166 2026] [:error] [pid 1072:tid 139877001647872] [client 20.48.250.41:44028] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ccc.php"] [unique_id "api4XlSr6Dum30GCXcSzfQAAARY"]
[Wed Sep 02 18:59:28.173721 2026] [:error] [pid 902:tid 139877077182208] [client 20.48.250.41:44012] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gg.php"] [unique_id "api4YHD3UfRyd6VRADI4nAAAAA0"]
[Wed Sep 02 18:59:29.435444 2026] [:error] [pid 902:tid 139877001647872] [client 20.48.250.41:43847] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nucqsqeg.php"] [unique_id "api4YXD3UfRyd6VRADI4nQAAABY"]
[Wed Sep 02 18:59:30.649578 2026] [:error] [pid 1073:tid 139877248907008] [client 20.48.250.41:43940] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "api4Ylaa_Qo7NvRGH-CxhQAAAUE"]
[Wed Sep 02 18:59:31.913537 2026] [:error] [pid 1073:tid 139876993255168] [client 20.48.250.41:43996] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/d12.php"] [unique_id "api4Y1aa_Qo7NvRGH-CxhwAAAVc"]
[Wed Sep 02 18:59:33.117734 2026] [:error] [pid 903:tid 139877152716544] [client 20.48.250.41:43941] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/erty.php"] [unique_id "api4Za_SfnohFj1ZkMFBBwAAAEQ"]
[Wed Sep 02 18:59:34.327763 2026] [:error] [pid 1072:tid 139877085574912] [client 20.48.250.41:43863] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/includes/about.php"] [unique_id "api4ZlSr6Dum30GCXcSzgQAAAQw"]
[Wed Sep 02 18:59:35.552151 2026] [:error] [pid 1150:tid 139877060396800] [client 20.48.250.41:43978] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/BDKR28WP.php"] [unique_id "api4Z1andIN96G83sQa27gAAAc8"]
[Wed Sep 02 18:59:36.790713 2026] [:error] [pid 1149:tid 139877018433280] [client 20.48.250.41:43859] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/otuz1.php"] [unique_id "api4aO5-Dlx-kBq1C1D99wAAAZQ"]
[Wed Sep 02 18:59:37.998698 2026] [:error] [pid 1149:tid 139877110753024] [client 20.48.250.41:43938] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kdrex.php"] [unique_id "api4ae5-Dlx-kBq1C1D9-wAAAYk"]
[Wed Sep 02 18:59:39.230345 2026] [:error] [pid 902:tid 139877001647872] [client 20.48.250.41:43982] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ar/mgsl.php"] [unique_id "api4a3D3UfRyd6VRADI4qQAAABY"]
[Wed Sep 02 18:59:40.449856 2026] [:error] [pid 904:tid 139877102360320] [client 20.48.250.41:43843] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/re.php"] [unique_id "api4bA1jFUZnIigSyINH2AAAAIo"]
[Wed Sep 02 18:59:41.672888 2026] [:error] [pid 1149:tid 139877232121600] [client 20.48.250.41:44014] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cilus.php"] [unique_id "api4be5-Dlx-kBq1C1D9_gAAAYM"]
[Wed Sep 02 18:59:42.885598 2026] [:error] [pid 902:tid 139877043611392] [client 20.48.250.41:43864] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nguoj.php"] [unique_id "api4bnD3UfRyd6VRADI4rAAAABE"]
[Wed Sep 02 18:59:44.104416 2026] [:error] [pid 1149:tid 139877102360320] [client 20.48.250.41:44000] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file59.php"] [unique_id "api4cO5-Dlx-kBq1C1D-AwAAAYo"]
[Wed Sep 02 18:59:45.308685 2026] [:error] [pid 1150:tid 139876984862464] [client 20.48.250.41:44030] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/edd.php"] [unique_id "api4cVandIN96G83sQa28AAAAdg"]
[Wed Sep 02 18:59:46.529813 2026] [:error] [pid 1072:tid 139877119145728] [client 20.48.250.41:43989] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/ioxi-o.php"] [unique_id "api4clSr6Dum30GCXcSzhQAAAQg"]
[Wed Sep 02 18:59:47.797224 2026] [:error] [pid 903:tid 139877060396800] [client 20.48.250.41:44005] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/g7y.php"] [unique_id "api4c6_SfnohFj1ZkMFBCgAAAE8"]
[Wed Sep 02 18:59:49.019769 2026] [:error] [pid 1073:tid 139877018433280] [client 20.48.250.41:44003] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/users.php"] [unique_id "api4dVaa_Qo7NvRGH-CxjwAAAVQ"]
[Wed Sep 02 18:59:50.235957 2026] [:error] [pid 903:tid 139877001647872] [client 20.48.250.41:43858] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xwx1.php"] [unique_id "api4dq_SfnohFj1ZkMFBCwAAAFY"]
[Wed Sep 02 18:59:51.503009 2026] [:error] [pid 1149:tid 139877043611392] [client 20.48.250.41:43970] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wlex.php"] [unique_id "api4d-5-Dlx-kBq1C1D-BQAAAZE"]
[Wed Sep 02 18:59:52.729444 2026] [:error] [pid 904:tid 139877035218688] [client 20.48.250.41:43919] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminfuns.php"] [unique_id "api4eA1jFUZnIigSyINH3AAAAJI"]
[Wed Sep 02 18:59:53.940052 2026] [:error] [pid 902:tid 139877093967616] [client 20.48.250.41:43962] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/css/index.php"] [unique_id "api4eXD3UfRyd6VRADI4tAAAAAs"]
[Wed Sep 02 18:59:55.156259 2026] [:error] [pid 903:tid 139877127538432] [client 20.48.250.41:43923] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/av.php"] [unique_id "api4e6_SfnohFj1ZkMFBEQAAAEc"]
[Wed Sep 02 18:59:56.364426 2026] [:error] [pid 903:tid 139877085574912] [client 20.48.250.41:44027] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp9.php"] [unique_id "api4fK_SfnohFj1ZkMFBFAAAAEw"]
[Wed Sep 02 18:59:57.575136 2026] [:error] [pid 904:tid 139877043611392] [client 20.48.250.41:43955] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-user.php"] [unique_id "api4fQ1jFUZnIigSyINH3gAAAJE"]
[Wed Sep 02 18:59:58.786476 2026] [:error] [pid 1150:tid 139877026825984] [client 20.48.250.41:44023] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pac.php"] [unique_id "api4flandIN96G83sQa29gAAAdM"]
[Wed Sep 02 19:00:00.026786 2026] [:error] [pid 902:tid 139876984862464] [client 20.48.250.41:43911] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-sid.php"] [unique_id "api4gHD3UfRyd6VRADI4wgAAABg"]
[Wed Sep 02 19:00:01.234855 2026] [:error] [pid 1150:tid 139877127538432] [client 20.48.250.41:43990] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cu.php"] [unique_id "api4gVandIN96G83sQa2-QAAAcc"]
[Wed Sep 02 19:00:02.471695 2026] [:error] [pid 1073:tid 139877010040576] [client 20.48.250.41:43992] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file9.php"] [unique_id "api4glaa_Qo7NvRGH-CxnQAAAVU"]
[Wed Sep 02 19:00:03.674942 2026] [:error] [pid 1149:tid 139877119145728] [client 20.48.250.41:43971] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/glmiiqmk.php"] [unique_id "api4g-5-Dlx-kBq1C1D-KAAAAYg"]
[Wed Sep 02 19:00:04.906885 2026] [:error] [pid 1149:tid 139877102360320] [client 20.48.250.41:44009] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/images/wp-signup.php"] [unique_id "api4hO5-Dlx-kBq1C1D-KwAAAYo"]
[Wed Sep 02 19:00:06.203755 2026] [:error] [pid 902:tid 139877119145728] [client 20.48.250.41:43930] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nw.php"] [unique_id "api4hnD3UfRyd6VRADI4ywAAAAg"]
[Wed Sep 02 19:00:07.420385 2026] [:error] [pid 1149:tid 139877052004096] [client 20.48.250.41:43981] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ios.php"] [unique_id "api4h-5-Dlx-kBq1C1D-OwAAAZA"]
[Wed Sep 02 19:00:08.667546 2026] [:error] [pid 1149:tid 139877035218688] [client 20.48.250.41:43993] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-trackback.php"] [unique_id "api4iO5-Dlx-kBq1C1D-QgAAAZI"]
[Wed Sep 02 19:00:09.876499 2026] [:error] [pid 902:tid 139877119145728] [client 20.48.250.41:43983] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/info.php.swp"] [unique_id "api4iXD3UfRyd6VRADI41QAAAAg"]
[Wed Sep 02 19:00:11.119405 2026] [:error] [pid 902:tid 139877093967616] [client 20.48.250.41:43907] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jp.php"] [unique_id "api4i3D3UfRyd6VRADI42AAAAAs"]
[Wed Sep 02 19:00:12.339841 2026] [:error] [pid 902:tid 139877152716544] [client 20.48.250.41:43851] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/tx78.php"] [unique_id "api4jHD3UfRyd6VRADI43QAAAAQ"]
[Wed Sep 02 19:00:13.554216 2026] [:error] [pid 1149:tid 139877102360320] [client 20.48.250.41:43948] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/iqb.php"] [unique_id "api4je5-Dlx-kBq1C1D-WQAAAYo"]
[Wed Sep 02 19:00:14.771236 2026] [:error] [pid 902:tid 139877093967616] [client 20.48.250.41:43964] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin-footer.php"] [unique_id "api4jnD3UfRyd6VRADI44gAAAAs"]
[Wed Sep 02 19:00:15.990460 2026] [:error] [pid 1149:tid 139877127538432] [client 20.48.250.41:43931] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/assets/images/images.php"] [unique_id "api4j-5-Dlx-kBq1C1D-YQAAAYc"]
[Wed Sep 02 19:00:17.205524 2026] [:error] [pid 902:tid 139877093967616] [client 20.48.250.41:43909] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/app.php"] [unique_id "api4kXD3UfRyd6VRADI47AAAAAs"]
[Wed Sep 02 19:00:18.453815 2026] [:error] [pid 1149:tid 139876993255168] [client 20.48.250.41:43987] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-home.php"] [unique_id "api4ku5-Dlx-kBq1C1D-bwAAAZc"]
[Wed Sep 02 19:00:19.655847 2026] [:error] [pid 903:tid 139877152716544] [client 20.48.250.41:44006] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dfre.php"] [unique_id "api4k6_SfnohFj1ZkMFBLgAAAEQ"]
[Wed Sep 02 19:00:20.857251 2026] [:error] [pid 1149:tid 139876984862464] [client 20.48.250.41:43922] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/akc.php"] [unique_id "api4lO5-Dlx-kBq1C1D-fgAAAZg"]
[Wed Sep 02 19:00:22.059499 2026] [:error] [pid 1072:tid 139877102360320] [client 20.48.250.41:43871] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ultradybbuks.php"] [unique_id "api4llSr6Dum30GCXcSzsAAAAQo"]
[Wed Sep 02 19:00:23.278914 2026] [:error] [pid 902:tid 139877026825984] [client 20.48.250.41:43943] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hel.php"] [unique_id "api4l3D3UfRyd6VRADI5AwAAABM"]
[Wed Sep 02 19:00:24.502142 2026] [:error] [pid 902:tid 139877102360320] [client 20.48.250.41:43905] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/num.php"] [unique_id "api4mHD3UfRyd6VRADI5BgAAAAo"]
[Wed Sep 02 19:00:25.715377 2026] [:error] [pid 1149:tid 139877052004096] [client 20.48.250.41:43935] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ortasekerli1.php"] [unique_id "api4me5-Dlx-kBq1C1D-jwAAAZA"]
[Wed Sep 02 19:00:26.959588 2026] [:error] [pid 1073:tid 139877119145728] [client 20.48.250.41:43959] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ww3.php"] [unique_id "api4mlaa_Qo7NvRGH-CxrAAAAUg"]
[Wed Sep 02 19:00:28.161906 2026] [:error] [pid 1072:tid 139877093967616] [client 20.48.250.41:43915] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/laudq.php"] [unique_id "api4nFSr6Dum30GCXcSztgAAAQs"]
[Wed Sep 02 19:00:29.388034 2026] [:error] [pid 1073:tid 139877127538432] [client 20.48.250.41:43840] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/HPum4ZEBJRC.php"] [unique_id "api4nVaa_Qo7NvRGH-CxrQAAAUc"]
[Wed Sep 02 19:00:30.612770 2026] [:error] [pid 1149:tid 139877052004096] [client 20.48.250.41:43937] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/akcc.php"] [unique_id "api4nu5-Dlx-kBq1C1D-mQAAAZA"]
[Wed Sep 02 19:00:31.828935 2026] [:error] [pid 902:tid 139877257299712] [client 20.48.250.41:43901] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/auths.php"] [unique_id "api4n3D3UfRyd6VRADI5DgAAAAA"]
[Wed Sep 02 19:00:33.045033 2026] [:error] [pid 1024:tid 139877068789504] [client 20.48.250.41:44020] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ghreshttryu.php"] [unique_id "api4oawUOJ55hWVbhHklugAAAM4"]
[Wed Sep 02 19:00:34.255054 2026] [:error] [pid 902:tid 139877135931136] [client 20.48.250.41:43783] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/1.php"] [unique_id "api4onD3UfRyd6VRADI5EAAAAAY"]
[Wed Sep 02 19:00:35.474728 2026] [:error] [pid 1149:tid 139877052004096] [client 20.48.250.41:44022] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/category.tokens.php"] [unique_id "api4o-5-Dlx-kBq1C1D-ogAAAZA"]
[Wed Sep 02 19:00:36.714552 2026] [:error] [pid 903:tid 139877135931136] [client 20.48.250.41:44017] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/enclas.php"] [unique_id "api4pK_SfnohFj1ZkMFBOwAAAEY"]
[Wed Sep 02 19:00:37.933268 2026] [:error] [pid 1024:tid 139876984862464] [client 20.48.250.41:43947] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dev1s.php"] [unique_id "api4pawUOJ55hWVbhHklvQAAANg"]
[Wed Sep 02 19:00:39.161393 2026] [:error] [pid 903:tid 139877001647872] [client 20.48.250.41:43933] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "api4p6_SfnohFj1ZkMFBPQAAAFY"]
[Wed Sep 02 19:00:40.384256 2026] [:error] [pid 902:tid 139877077182208] [client 20.48.250.41:43986] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ms-edit.php"] [unique_id "api4qHD3UfRyd6VRADI5HQAAAA0"]
[Wed Sep 02 19:00:41.607435 2026] [:error] [pid 1150:tid 139877010040576] [client 20.48.250.41:43950] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/work.php"] [unique_id "api4qVandIN96G83sQa3DAAAAdU"]
[Wed Sep 02 19:00:42.818555 2026] [:error] [pid 1149:tid 139877018433280] [client 20.48.250.41:43980] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ww1.php"] [unique_id "api4qu5-Dlx-kBq1C1D-swAAAZQ"]
[Wed Sep 02 19:00:44.029955 2026] [:error] [pid 1149:tid 139877093967616] [client 20.48.250.41:43896] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mac.php"] [unique_id "api4rO5-Dlx-kBq1C1D-twAAAYs"]
[Wed Sep 02 19:00:45.245530 2026] [:error] [pid 1072:tid 139877135931136] [client 20.48.250.41:43845] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/info.php~"] [unique_id "api4rVSr6Dum30GCXcSzvwAAAQY"]
[Wed Sep 02 19:00:46.452173 2026] [:error] [pid 903:tid 139877001647872] [client 20.48.250.41:43988] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/goat.php"] [unique_id "api4rq_SfnohFj1ZkMFBQgAAAFY"]
[Wed Sep 02 19:00:47.694481 2026] [:error] [pid 904:tid 139877043611392] [client 20.48.250.41:43932] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws80.php"] [unique_id "api4rw1jFUZnIigSyINIAAAAAJE"]
[Wed Sep 02 19:00:48.918726 2026] [:error] [pid 1149:tid 139877043611392] [client 20.48.250.41:43878] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/classwithtostring.php"] [unique_id "api4sO5-Dlx-kBq1C1D-uwAAAZE"]
[Wed Sep 02 19:00:50.137779 2026] [:error] [pid 1072:tid 139877119145728] [client 20.48.250.41:43956] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pouhg.php"] [unique_id "api4slSr6Dum30GCXcSzwwAAAQg"]
[Wed Sep 02 19:00:51.360475 2026] [:error] [pid 902:tid 139877110753024] [client 20.48.250.41:43908] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/myfile.php"] [unique_id "api4s3D3UfRyd6VRADI5KwAAAAk"]
[Wed Sep 02 19:00:52.587412 2026] [:error] [pid 1072:tid 139877001647872] [client 20.48.250.41:43778] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/asa.php"] [unique_id "api4tFSr6Dum30GCXcSzyAAAARY"]
[Wed Sep 02 19:00:53.819596 2026] [:error] [pid 902:tid 139877232121600] [client 20.48.250.41:43875] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fw.php"] [unique_id "api4tXD3UfRyd6VRADI5NAAAAAM"]
[Wed Sep 02 19:00:55.052785 2026] [:error] [pid 904:tid 139877026825984] [client 20.48.250.41:43791] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws78.php"] [unique_id "api4tw1jFUZnIigSyINICAAAAJM"]
[Wed Sep 02 19:00:56.274189 2026] [:error] [pid 902:tid 139877127538432] [client 20.48.250.41:43844] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bekle.php"] [unique_id "api4uHD3UfRyd6VRADI5PwAAAAc"]
[Wed Sep 02 19:00:57.503668 2026] [:error] [pid 1072:tid 139877102360320] [client 20.48.250.41:43975] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/z57.php"] [unique_id "api4uVSr6Dum30GCXcSzzAAAAQo"]
[Wed Sep 02 19:00:58.730167 2026] [:error] [pid 902:tid 139877043611392] [client 20.48.250.41:44001] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "api4unD3UfRyd6VRADI5QgAAABE"]
[Wed Sep 02 19:00:59.974871 2026] [:error] [pid 1149:tid 139877110753024] [client 20.48.250.41:43954] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/miuio.php"] [unique_id "api4u-5-Dlx-kBq1C1D-ygAAAYk"]
[Wed Sep 02 19:01:01.193527 2026] [:error] [pid 904:tid 139877018433280] [client 20.48.250.41:43857] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/h02ugyh.php"] [unique_id "api4vQ1jFUZnIigSyINIDQAAAJQ"]
[Wed Sep 02 19:01:02.406945 2026] [:error] [pid 1073:tid 139876993255168] [client 20.48.250.41:43927] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hehe.php"] [unique_id "api4vlaa_Qo7NvRGH-CxuwAAAVc"]
[Wed Sep 02 19:01:03.636489 2026] [:error] [pid 1149:tid 139877232121600] [client 20.48.250.41:43995] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dejavu.php"] [unique_id "api4v-5-Dlx-kBq1C1D-zAAAAYM"]
[Wed Sep 02 19:01:04.860269 2026] [:error] [pid 1024:tid 139877068789504] [client 20.48.250.41:44004] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/qaez.php56"] [unique_id "api4wKwUOJ55hWVbhHklzwAAAM4"]
[Wed Sep 02 19:01:06.102294 2026] [:error] [pid 1073:tid 139877093967616] [client 20.48.250.41:43945] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file30.php"] [unique_id "api4wlaa_Qo7NvRGH-CxvQAAAUs"]
[Wed Sep 02 19:01:07.322570 2026] [:error] [pid 1024:tid 139877119145728] [client 20.48.250.41:44031] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wso.php"] [unique_id "api4w6wUOJ55hWVbhHkl1QAAAMg"]
[Wed Sep 02 19:01:08.559987 2026] [:error] [pid 904:tid 139877119145728] [client 20.48.250.41:43856] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "api4xA1jFUZnIigSyINIFgAAAIg"]
[Wed Sep 02 19:01:09.773685 2026] [:error] [pid 1150:tid 139876984862464] [client 20.48.250.41:44025] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file.php"] [unique_id "api4xVandIN96G83sQa3HAAAAdg"]
[Wed Sep 02 19:01:11.019797 2026] [:error] [pid 903:tid 139877010040576] [client 20.48.250.41:43852] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pu.php"] [unique_id "api4x6_SfnohFj1ZkMFBUwAAAFU"]
[Wed Sep 02 19:01:12.249549 2026] [:error] [pid 902:tid 139877010040576] [client 20.48.250.41:43848] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/clss.php"] [unique_id "api4yHD3UfRyd6VRADI5UAAAABU"]
[Wed Sep 02 19:01:13.454964 2026] [:error] [pid 1024:tid 139877102360320] [client 20.48.250.41:43952] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws81.php"] [unique_id "api4yawUOJ55hWVbhHkl2QAAAMo"]
[Wed Sep 02 19:01:14.687516 2026] [:error] [pid 1024:tid 139877248907008] [client 20.48.250.41:43977] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bolt.php"] [unique_id "api4yqwUOJ55hWVbhHkl2gAAAME"]
[Wed Sep 02 19:01:15.906363 2026] [:error] [pid 904:tid 139877240514304] [client 20.48.250.41:43899] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xstelth.php"] [unique_id "api4yw1jFUZnIigSyINIHwAAAII"]
[Wed Sep 02 19:01:17.149060 2026] [:error] [pid 1149:tid 139877043611392] [client 20.48.250.41:43862] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/atomlib.php"] [unique_id "api4ze5-Dlx-kBq1C1D-0wAAAZE"]
[Wed Sep 02 19:01:18.356394 2026] [:error] [pid 1024:tid 139877127538432] [client 20.48.250.41:43958] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file5.php"] [unique_id "api4zqwUOJ55hWVbhHkl3wAAAMc"]
[Wed Sep 02 19:01:19.613893 2026] [:error] [pid 904:tid 139877010040576] [client 20.48.250.41:44016] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gm.php"] [unique_id "api4zw1jFUZnIigSyINIJwAAAJU"]
[Wed Sep 02 19:01:20.822368 2026] [:error] [pid 904:tid 139877068789504] [client 20.48.250.41:43998] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/obfuscous.php"] [unique_id "api40A1jFUZnIigSyINIKAAAAI4"]
[Wed Sep 02 19:01:22.039843 2026] [:error] [pid 1150:tid 139877232121600] [client 20.48.250.41:43913] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/tqloh.php"] [unique_id "api40landIN96G83sQa3JAAAAcM"]
[Wed Sep 02 19:01:23.255351 2026] [:error] [pid 1024:tid 139876984862464] [client 20.48.250.41:43850] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "api406wUOJ55hWVbhHkl5AAAANg"]
[Wed Sep 02 19:01:24.459525 2026] [:error] [pid 1149:tid 139877068789504] [client 20.48.250.41:43849] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mgsl.php"] [unique_id "api41O5-Dlx-kBq1C1D-2AAAAY4"]
[Wed Sep 02 19:01:25.669616 2026] [:error] [pid 1024:tid 139877232121600] [client 20.48.250.41:43866] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/info.php.bak"] [unique_id "api41awUOJ55hWVbhHkl6QAAAMM"]
[Wed Sep 02 19:01:26.877887 2026] [:error] [pid 904:tid 139877077182208] [client 20.48.250.41:43957] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/qjaqjahu.php"] [unique_id "api41g1jFUZnIigSyINIKgAAAI0"]
[Wed Sep 02 19:01:28.094518 2026] [:error] [pid 1150:tid 139877119145728] [client 20.48.250.41:43790] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/go.php"] [unique_id "api42FandIN96G83sQa3JgAAAcg"]
[Wed Sep 02 19:01:29.311763 2026] [:error] [pid 902:tid 139877232121600] [client 20.48.250.41:43944] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/8.php"] [unique_id "api42XD3UfRyd6VRADI5WQAAAAM"]
[Wed Sep 02 19:01:30.527596 2026] [:error] [pid 902:tid 139877043611392] [client 20.48.250.41:43876] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/codehu.php"] [unique_id "api42nD3UfRyd6VRADI5XQAAABE"]
[Wed Sep 02 19:01:31.764159 2026] [:error] [pid 1149:tid 139877077182208] [client 20.48.250.41:43874] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/docs.php"] [unique_id "api42-5-Dlx-kBq1C1D-2gAAAY0"]
[Wed Sep 02 19:01:32.979614 2026] [:error] [pid 1024:tid 139877152716544] [client 20.48.250.41:43788] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sid3.php"] [unique_id "api43KwUOJ55hWVbhHkl8AAAAMQ"]
[Wed Sep 02 19:01:34.215172 2026] [:error] [pid 1150:tid 139877018433280] [client 20.48.250.41:43949] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/tool.php"] [unique_id "api43landIN96G83sQa3KwAAAdQ"]
[Wed Sep 02 19:01:35.493921 2026] [:error] [pid 1073:tid 139877248907008] [client 20.48.250.41:43872] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/init.php"] [unique_id "api431aa_Qo7NvRGH-CxyAAAAUE"]
[Wed Sep 02 19:01:36.711225 2026] [:error] [pid 902:tid 139877085574912] [client 20.48.250.41:43786] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pwyjwrfr.php"] [unique_id "api44HD3UfRyd6VRADI5YgAAAAw"]
[Wed Sep 02 19:01:37.942601 2026] [:error] [pid 902:tid 139876993255168] [client 20.48.250.41:43966] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/panelx.php"] [unique_id "api44XD3UfRyd6VRADI5YwAAABc"]
[Wed Sep 02 19:01:39.161039 2026] [:error] [pid 1024:tid 139877018433280] [client 20.48.250.41:43809] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/6kUgr4yGzxN.php"] [unique_id "api446wUOJ55hWVbhHkl9gAAANQ"]
[Wed Sep 02 19:01:40.378583 2026] [:error] [pid 1150:tid 139877144323840] [client 20.48.250.41:43900] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/k.php"] [unique_id "api45FandIN96G83sQa3MAAAAcU"]
[Wed Sep 02 19:01:41.579191 2026] [:error] [pid 1072:tid 139877001647872] [client 20.48.250.41:43854] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/taktak.php"] [unique_id "api45VSr6Dum30GCXcSz3gAAARY"]
[Wed Sep 02 19:01:42.800001 2026] [:error] [pid 1149:tid 139876993255168] [client 20.48.250.41:43807] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/ova.php"] [unique_id "api45u5-Dlx-kBq1C1D-3QAAAZc"]
[Wed Sep 02 19:01:44.026542 2026] [:error] [pid 1150:tid 139877232121600] [client 20.48.250.41:43939] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/abcd.php"] [unique_id "api46FandIN96G83sQa3MwAAAcM"]
[Wed Sep 02 19:01:45.249978 2026] [:error] [pid 903:tid 139877144323840] [client 20.48.250.41:43934] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws.php"] [unique_id "api46a_SfnohFj1ZkMFBYQAAAEU"]
[Wed Sep 02 19:01:46.464326 2026] [:error] [pid 1150:tid 139877018433280] [client 20.48.250.41:43779] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wp-config.php"] [unique_id "api46landIN96G83sQa3NQAAAdQ"]
[Wed Sep 02 19:01:47.675206 2026] [:error] [pid 902:tid 139876993255168] [client 20.48.250.41:43886] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/amp.php"] [unique_id "api463D3UfRyd6VRADI5ZgAAABc"]
[Wed Sep 02 19:01:48.883755 2026] [:error] [pid 1149:tid 139876993255168] [client 20.48.250.41:43929] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/NewFile.php"] [unique_id "api47O5-Dlx-kBq1C1D-4QAAAZc"]
[Wed Sep 02 19:01:50.111571 2026] [:error] [pid 1149:tid 139877060396800] [client 20.48.250.41:43883] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/panel.php"] [unique_id "api47u5-Dlx-kBq1C1D-5AAAAY8"]
[Wed Sep 02 19:01:51.346501 2026] [:error] [pid 902:tid 139877001647872] [client 20.48.250.41:43860] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/undel.php"] [unique_id "api473D3UfRyd6VRADI5aQAAABY"]
[Wed Sep 02 19:01:52.566259 2026] [:error] [pid 1024:tid 139876984862464] [client 20.48.250.41:43833] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fs.php"] [unique_id "api48KwUOJ55hWVbhHkmCgAAANg"]
[Wed Sep 02 19:01:53.782963 2026] [:error] [pid 1150:tid 139877052004096] [client 20.48.250.41:43776] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/RsR.php"] [unique_id "api48VandIN96G83sQa3OwAAAdA"]
[Wed Sep 02 19:01:55.000955 2026] [:error] [pid 903:tid 139877068789504] [client 20.48.250.41:43837] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bn.php"] [unique_id "api48q_SfnohFj1ZkMFBZAAAAE4"]
[Wed Sep 02 19:01:56.219876 2026] [:error] [pid 902:tid 139877240514304] [client 20.48.250.41:43890] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php.php"] [unique_id "api49HD3UfRyd6VRADI5bAAAAAI"]
[Wed Sep 02 19:01:57.451900 2026] [:error] [pid 1024:tid 139877110753024] [client 20.48.250.41:43815] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/uploads/about.php"] [unique_id "api49awUOJ55hWVbhHkmDgAAAMk"]
[Wed Sep 02 19:01:58.669411 2026] [:error] [pid 1150:tid 139877135931136] [client 20.48.250.41:43787] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/themes.php"] [unique_id "api49landIN96G83sQa3PgAAAcY"]
[Wed Sep 02 19:01:59.886958 2026] [:error] [pid 902:tid 139877068789504] [client 20.48.250.41:43882] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bes.php"] [unique_id "api493D3UfRyd6VRADI5cQAAAA4"]
[Wed Sep 02 19:02:01.134605 2026] [:error] [pid 1150:tid 139877144323840] [client 20.48.250.41:43891] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-the.php"] [unique_id "api4-VandIN96G83sQa3QAAAAcU"]
[Wed Sep 02 19:02:02.358205 2026] [:error] [pid 1149:tid 139877018433280] [client 20.48.250.41:43967] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/z60.php"] [unique_id "api4-u5-Dlx-kBq1C1D-6QAAAZQ"]
[Wed Sep 02 19:02:03.571612 2026] [:error] [pid 904:tid 139877152716544] [client 20.48.250.41:43713] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sid-file.php"] [unique_id "api4-w1jFUZnIigSyINIPgAAAIQ"]
[Wed Sep 02 19:02:04.817421 2026] [:error] [pid 904:tid 139876993255168] [client 20.48.250.41:43834] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xc.php"] [unique_id "api4_A1jFUZnIigSyINIQgAAAJc"]
[Wed Sep 02 19:02:06.051184 2026] [:error] [pid 1073:tid 139877127538432] [client 20.48.250.41:43895] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/BMjXQkgwpeb.php"] [unique_id "api4_laa_Qo7NvRGH-Cx1AAAAUc"]
[Wed Sep 02 19:02:07.270745 2026] [:error] [pid 1072:tid 139877001647872] [client 20.48.250.41:43879] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ox8xhkkw.php"] [unique_id "api4_1Sr6Dum30GCXcSz6gAAARY"]
[Wed Sep 02 19:02:08.486764 2026] [:error] [pid 1149:tid 139877001647872] [client 20.48.250.41:43892] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/option.php"] [unique_id "api5AO5-Dlx-kBq1C1D-7gAAAZY"]
[Wed Sep 02 19:02:09.757659 2026] [:error] [pid 1073:tid 139877240514304] [client 20.48.250.41:43951] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/file32.php"] [unique_id "api5AVaa_Qo7NvRGH-Cx1QAAAUI"]
[Wed Sep 02 19:02:10.968350 2026] [:error] [pid 1073:tid 139877248907008] [client 20.48.250.41:43817] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ss.php"] [unique_id "api5Alaa_Qo7NvRGH-Cx1gAAAUE"]
[Wed Sep 02 19:02:12.183468 2026] [:error] [pid 1149:tid 139877010040576] [client 20.48.250.41:43855] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/we.php"] [unique_id "api5BO5-Dlx-kBq1C1D-7wAAAZU"]
[Wed Sep 02 19:02:13.406176 2026] [:error] [pid 902:tid 139877102360320] [client 20.48.250.41:43925] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wefile.php"] [unique_id "api5BXD3UfRyd6VRADI5fQAAAAo"]
[Wed Sep 02 19:02:14.621837 2026] [:error] [pid 1149:tid 139876993255168] [client 20.48.250.41:43917] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/home.php"] [unique_id "api5Bu5-Dlx-kBq1C1D-8QAAAZc"]
[Wed Sep 02 19:02:15.907886 2026] [:error] [pid 1150:tid 139877152716544] [client 20.48.250.41:43821] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ff.php"] [unique_id "api5B1andIN96G83sQa3TQAAAcQ"]
[Wed Sep 02 19:02:17.156334 2026] [:error] [pid 904:tid 139876993255168] [client 20.48.250.41:43881] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/inghl.php"] [unique_id "api5CQ1jFUZnIigSyINISgAAAJc"]
[Wed Sep 02 19:02:18.375556 2026] [:error] [pid 1150:tid 139877043611392] [client 20.48.250.41:43885] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/4fk6.php"] [unique_id "api5ClandIN96G83sQa3UAAAAdE"]
[Wed Sep 02 19:02:19.587846 2026] [:error] [pid 1024:tid 139877060396800] [client 20.48.250.41:43887] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/raiz0.php"] [unique_id "api5C6wUOJ55hWVbhHkmKwAAAM8"]
[Wed Sep 02 19:02:20.861160 2026] [:error] [pid 902:tid 139877144323840] [client 20.48.250.41:43801] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/case.php"] [unique_id "api5DHD3UfRyd6VRADI5hQAAAAU"]
[Wed Sep 02 19:02:22.081278 2026] [:error] [pid 902:tid 139877257299712] [client 20.48.250.41:43727] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/x.php"] [unique_id "api5DnD3UfRyd6VRADI5hwAAAAA"]
[Wed Sep 02 19:02:23.314092 2026] [:error] [pid 1024:tid 139877110753024] [client 20.48.250.41:43835] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ce.php"] [unique_id "api5D6wUOJ55hWVbhHkmNAAAAMk"]
[Wed Sep 02 19:02:24.531903 2026] [:error] [pid 1072:tid 139877060396800] [client 20.48.250.41:43870] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/show/asa.php"] [unique_id "api5EFSr6Dum30GCXcSz8AAAAQ8"]
[Wed Sep 02 19:02:24.781848 2026] [proxy_fcgi:error] [pid 1024:tid 139877102360320] [client 68.183.218.41:54902] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:02:25.779150 2026] [:error] [pid 902:tid 139877085574912] [client 20.48.250.41:43754] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/403.php"] [unique_id "api5EXD3UfRyd6VRADI5iQAAAAw"]
[Wed Sep 02 19:02:26.999589 2026] [:error] [pid 903:tid 139876993255168] [client 20.48.250.41:43717] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/LvCBeZWaSgQ.php"] [unique_id "api5Eq_SfnohFj1ZkMFBbgAAAFc"]
[Wed Sep 02 19:02:28.215771 2026] [:error] [pid 902:tid 139877018433280] [client 20.48.250.41:43836] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zde.php"] [unique_id "api5FHD3UfRyd6VRADI5jAAAABQ"]
[Wed Sep 02 19:02:29.424380 2026] [:error] [pid 1024:tid 139877248907008] [client 20.48.250.41:43838] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-access.php"] [unique_id "api5FawUOJ55hWVbhHkmPQAAAME"]
[Wed Sep 02 19:02:30.634036 2026] [:error] [pid 1024:tid 139876984862464] [client 20.48.250.41:43889] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/0xby.php"] [unique_id "api5FqwUOJ55hWVbhHkmQAAAANg"]
[Wed Sep 02 19:02:31.890039 2026] [:error] [pid 903:tid 139876984862464] [client 20.48.250.41:43796] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "api5F6_SfnohFj1ZkMFBcQAAAFg"]
[Wed Sep 02 19:02:33.191580 2026] [:error] [pid 1149:tid 139877119145728] [client 20.48.250.41:43799] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/t.php"] [unique_id "api5Ge5-Dlx-kBq1C1D-9wAAAYg"]
[Wed Sep 02 19:02:34.427598 2026] [:error] [pid 902:tid 139877010040576] [client 20.48.250.41:43961] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jga.php"] [unique_id "api5GnD3UfRyd6VRADI5jgAAABU"]
[Wed Sep 02 19:02:35.832275 2026] [:error] [pid 1024:tid 139877248907008] [client 20.48.250.41:43804] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xml.php"] [unique_id "api5G6wUOJ55hWVbhHkmSwAAAME"]
[Wed Sep 02 19:02:37.037044 2026] [:error] [pid 1024:tid 139877035218688] [client 20.48.250.41:43726] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/KV7EGJmhHzX.php"] [unique_id "api5HawUOJ55hWVbhHkmTgAAANI"]
[Wed Sep 02 19:02:38.262154 2026] [:error] [pid 1024:tid 139877248907008] [client 20.48.250.41:43808] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-securitiy.php"] [unique_id "api5HqwUOJ55hWVbhHkmUQAAAME"]
[Wed Sep 02 19:02:39.471536 2026] [:error] [pid 1150:tid 139877248907008] [client 20.48.250.41:43831] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lock360.php"] [unique_id "api5H1andIN96G83sQa3ZAAAAcE"]
[Wed Sep 02 19:02:40.686318 2026] [:error] [pid 1150:tid 139876984862464] [client 20.48.250.41:43969] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/click.php"] [unique_id "api5IFandIN96G83sQa3ZwAAAdg"]
[Wed Sep 02 19:02:41.905869 2026] [:error] [pid 1024:tid 139877144323840] [client 20.48.250.41:43902] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/solo1.php"] [unique_id "api5IawUOJ55hWVbhHkmVgAAAMU"]
[Wed Sep 02 19:02:43.119846 2026] [:error] [pid 1024:tid 139877001647872] [client 20.48.250.41:43877] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/783de.php"] [unique_id "api5I6wUOJ55hWVbhHkmVwAAANY"]
[Wed Sep 02 19:02:44.339368 2026] [:error] [pid 1150:tid 139877018433280] [client 20.48.250.41:43820] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gmo.php"] [unique_id "api5JFandIN96G83sQa3awAAAdQ"]
[Wed Sep 02 19:02:45.541407 2026] [:error] [pid 1150:tid 139877093967616] [client 20.48.250.41:43841] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lock.php"] [unique_id "api5JVandIN96G83sQa3cAAAAcs"]
[Wed Sep 02 19:02:46.760594 2026] [:error] [pid 902:tid 139877110753024] [client 20.48.250.41:43800] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-advaced.php"] [unique_id "api5JnD3UfRyd6VRADI5lQAAAAk"]
[Wed Sep 02 19:02:47.973384 2026] [:error] [pid 904:tid 139877248907008] [client 20.48.250.41:43724] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mhpglaje.php"] [unique_id "api5Jw1jFUZnIigSyINIUAAAAIE"]
[Wed Sep 02 19:02:49.210837 2026] [:error] [pid 1072:tid 139877001647872] [client 20.48.250.41:43824] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "api5KVSr6Dum30GCXcSz_wAAARY"]
[Wed Sep 02 19:02:50.484938 2026] [:error] [pid 1024:tid 139877035218688] [client 20.48.250.41:43728] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/25.php"] [unique_id "api5KqwUOJ55hWVbhHkmXgAAANI"]
[Wed Sep 02 19:02:51.707732 2026] [:error] [pid 1024:tid 139877077182208] [client 20.48.250.41:43825] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bo.php"] [unique_id "api5K6wUOJ55hWVbhHkmYQAAAM0"]
[Wed Sep 02 19:02:52.958875 2026] [:error] [pid 1024:tid 139877248907008] [client 20.48.250.41:43994] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ww3.php"] [unique_id "api5LKwUOJ55hWVbhHkmZAAAAME"]
[Wed Sep 02 19:02:54.189445 2026] [:error] [pid 902:tid 139877085574912] [client 20.48.250.41:43903] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wxo.php"] [unique_id "api5LnD3UfRyd6VRADI5mgAAAAw"]
[Wed Sep 02 19:02:55.436683 2026] [:error] [pid 902:tid 139876993255168] [client 20.48.250.41:43819] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/yapgb.php"] [unique_id "api5L3D3UfRyd6VRADI5ngAAABc"]
[Wed Sep 02 19:02:56.658238 2026] [:error] [pid 1150:tid 139877060396800] [client 20.48.250.41:43892] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/assacc.php"] [unique_id "api5MFandIN96G83sQa3dAAAAc8"]
[Wed Sep 02 19:02:57.888127 2026] [:error] [pid 1150:tid 139877035218688] [client 20.48.250.41:44021] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lp5.php"] [unique_id "api5MVandIN96G83sQa3egAAAdI"]
[Wed Sep 02 19:02:59.105443 2026] [:error] [pid 904:tid 139877068789504] [client 20.48.250.41:43793] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jlex.php"] [unique_id "api5Mw1jFUZnIigSyINIVgAAAI4"]
[Wed Sep 02 19:03:00.338256 2026] [:error] [pid 1073:tid 139877248907008] [client 20.48.250.41:43813] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/installer.php"] [unique_id "api5NFaa_Qo7NvRGH-Cx5wAAAUE"]
[Wed Sep 02 19:03:01.575084 2026] [:error] [pid 1150:tid 139877026825984] [client 20.48.250.41:43752] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/s121ws2s.php"] [unique_id "api5NVandIN96G83sQa3hQAAAdM"]
[Wed Sep 02 19:03:02.802441 2026] [:error] [pid 904:tid 139877018433280] [client 20.48.250.41:44015] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-ac.php"] [unique_id "api5Ng1jFUZnIigSyINIWAAAAJQ"]
[Wed Sep 02 19:03:04.039944 2026] [:error] [pid 903:tid 139877110753024] [client 20.48.250.41:43758] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/qhLaGswd9DS.php"] [unique_id "api5OK_SfnohFj1ZkMFBegAAAEk"]
[Wed Sep 02 19:03:05.272833 2026] [:error] [pid 1150:tid 139877240514304] [client 20.48.250.41:43742] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/w.php"] [unique_id "api5OVandIN96G83sQa3iAAAAcI"]
[Wed Sep 02 19:03:06.493756 2026] [:error] [pid 1024:tid 139877077182208] [client 20.48.250.41:44008] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/unrcj.php"] [unique_id "api5OqwUOJ55hWVbhHkmegAAAM0"]
[Wed Sep 02 19:03:07.724862 2026] [:error] [pid 904:tid 139877077182208] [client 20.48.250.41:43798] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/opts.php"] [unique_id "api5Ow1jFUZnIigSyINIWwAAAI0"]
[Wed Sep 02 19:03:08.949966 2026] [:error] [pid 903:tid 139876984862464] [client 20.48.250.41:43904] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "api5PK_SfnohFj1ZkMFBfAAAAFg"]
[Wed Sep 02 19:03:10.185972 2026] [:error] [pid 1024:tid 139877144323840] [client 20.48.250.41:43898] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gos.php"] [unique_id "api5PqwUOJ55hWVbhHkmgQAAAMU"]
[Wed Sep 02 19:03:11.405240 2026] [:error] [pid 903:tid 139877135931136] [client 20.48.250.41:43906] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "api5P6_SfnohFj1ZkMFBfgAAAEY"]
[Wed Sep 02 19:03:12.621599 2026] [:error] [pid 903:tid 139877248907008] [client 20.48.250.41:43861] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/test.php.orig"] [unique_id "api5QK_SfnohFj1ZkMFBfwAAAEE"]
[Wed Sep 02 19:03:13.839503 2026] [:error] [pid 1024:tid 139877043611392] [client 20.48.250.41:43997] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/indo.php"] [unique_id "api5QawUOJ55hWVbhHkmhQAAANE"]
[Wed Sep 02 19:03:15.053370 2026] [:error] [pid 1024:tid 139877232121600] [client 20.48.250.41:43897] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fs7.php"] [unique_id "api5Q6wUOJ55hWVbhHkmhgAAAMM"]
[Wed Sep 02 19:03:16.272375 2026] [:error] [pid 1073:tid 139877248907008] [client 20.48.250.41:44011] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/network.php"] [unique_id "api5RFaa_Qo7NvRGH-Cx6wAAAUE"]
[Wed Sep 02 19:03:17.529943 2026] [:error] [pid 1149:tid 139877052004096] [client 20.48.250.41:43924] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/krypton.php"] [unique_id "api5Re5-Dlx-kBq1C1D_BAAAAZA"]
[Wed Sep 02 19:03:18.736798 2026] [:error] [pid 1150:tid 139877102360320] [client 20.48.250.41:43785] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/domains.php"] [unique_id "api5RlandIN96G83sQa3lwAAAco"]
[Wed Sep 02 19:03:19.991530 2026] [:error] [pid 1149:tid 139877152716544] [client 20.48.250.41:43875] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/worksec.php"] [unique_id "api5R-5-Dlx-kBq1C1D_BwAAAYQ"]
[Wed Sep 02 19:03:21.243291 2026] [:error] [pid 903:tid 139877060396800] [client 20.48.250.41:43763] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-themes.php"] [unique_id "api5Sa_SfnohFj1ZkMFBhAAAAE8"]
[Wed Sep 02 19:03:22.502250 2026] [:error] [pid 1024:tid 139877068789504] [client 20.48.250.41:43747] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bthil.php"] [unique_id "api5SqwUOJ55hWVbhHkmlQAAAM4"]
[Wed Sep 02 19:03:23.716668 2026] [:error] [pid 1150:tid 139877093967616] [client 20.48.250.41:43769] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "api5S1andIN96G83sQa3nwAAAcs"]
[Wed Sep 02 19:03:24.954069 2026] [:error] [pid 1024:tid 139877144323840] [client 20.48.250.41:43823] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/drykl.php"] [unique_id "api5TKwUOJ55hWVbhHkmlwAAAMU"]
[Wed Sep 02 19:03:26.192445 2026] [:error] [pid 903:tid 139877035218688] [client 20.48.250.41:43805] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cc.php"] [unique_id "api5Tq_SfnohFj1ZkMFBhgAAAFI"]
[Wed Sep 02 19:03:27.405673 2026] [:error] [pid 1150:tid 139877152716544] [client 20.48.250.41:44013] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/24.php"] [unique_id "api5T1andIN96G83sQa3owAAAcQ"]
[Wed Sep 02 19:03:28.619039 2026] [:error] [pid 1150:tid 139877010040576] [client 20.48.250.41:43720] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xr.php"] [unique_id "api5UFandIN96G83sQa3qAAAAdU"]
[Wed Sep 02 19:03:29.823164 2026] [:error] [pid 904:tid 139877144323840] [client 20.48.250.41:43893] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/byp.php"] [unique_id "api5UQ1jFUZnIigSyINIZAAAAIU"]
[Wed Sep 02 19:03:31.040064 2026] [:error] [pid 1073:tid 139877152716544] [client 20.48.250.41:43723] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/rzki.php"] [unique_id "api5U1aa_Qo7NvRGH-Cx8AAAAUQ"]
[Wed Sep 02 19:03:32.255904 2026] [:error] [pid 1149:tid 139877248907008] [client 20.48.250.41:43853] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/min.php"] [unique_id "api5VO5-Dlx-kBq1C1D_FQAAAYE"]
[Wed Sep 02 19:03:33.487183 2026] [:error] [pid 1150:tid 139877052004096] [client 20.48.250.41:43725] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/crgio.php"] [unique_id "api5VVandIN96G83sQa3rwAAAdA"]
[Wed Sep 02 19:03:34.737907 2026] [:error] [pid 1024:tid 139877060396800] [client 20.48.250.41:44007] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pn.php"] [unique_id "api5VqwUOJ55hWVbhHkmpQAAAM8"]
[Wed Sep 02 19:03:35.954904 2026] [:error] [pid 902:tid 139877152716544] [client 20.48.250.41:43928] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xtt.php"] [unique_id "api5V3D3UfRyd6VRADI5vgAAAAQ"]
[Wed Sep 02 19:03:37.156973 2026] [:error] [pid 1150:tid 139877035218688] [client 20.48.250.41:43926] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ls.php"] [unique_id "api5WVandIN96G83sQa3tgAAAdI"]
[Wed Sep 02 19:03:38.386506 2026] [:error] [pid 1150:tid 139877026825984] [client 20.48.250.41:43916] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wso-x569.php"] [unique_id "api5WlandIN96G83sQa3twAAAdM"]
[Wed Sep 02 19:03:39.726033 2026] [:error] [pid 1024:tid 139877085574912] [client 20.48.250.41:44024] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/Text/index.php"] [unique_id "api5W6wUOJ55hWVbhHkmtQAAAMw"]
[Wed Sep 02 19:03:40.933581 2026] [:error] [pid 903:tid 139877144323840] [client 20.48.250.41:43869] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/vx.php"] [unique_id "api5XK_SfnohFj1ZkMFBigAAAEU"]
[Wed Sep 02 19:03:42.137303 2026] [:error] [pid 902:tid 139877240514304] [client 20.48.250.41:43719] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp5.php"] [unique_id "api5XnD3UfRyd6VRADI5wwAAAAI"]
[Wed Sep 02 19:03:43.390473 2026] [:error] [pid 1150:tid 139877240514304] [client 20.48.250.41:43657] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/11.php"] [unique_id "api5X1andIN96G83sQa3ywAAAcI"]
[Wed Sep 02 19:03:44.611740 2026] [:error] [pid 1073:tid 139877010040576] [client 20.48.250.41:43936] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/acxx.php"] [unique_id "api5YFaa_Qo7NvRGH-Cx-QAAAVU"]
[Wed Sep 02 19:03:45.833576 2026] [:error] [pid 1150:tid 139877102360320] [client 20.48.250.41:44026] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/disengaging.php"] [unique_id "api5YVandIN96G83sQa3zQAAAco"]
[Wed Sep 02 19:03:47.057854 2026] [:error] [pid 902:tid 139877232121600] [client 20.48.250.41:43918] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xrp.php"] [unique_id "api5Y3D3UfRyd6VRADI5ygAAAAM"]
[Wed Sep 02 19:03:48.272987 2026] [:error] [pid 1150:tid 139877257299712] [client 20.48.250.41:44012] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ccs.php"] [unique_id "api5ZFandIN96G83sQa31QAAAcA"]
[Wed Sep 02 19:03:49.520206 2026] [:error] [pid 904:tid 139877035218688] [client 20.48.250.41:43973] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cord.php"] [unique_id "api5ZQ1jFUZnIigSyINIcQAAAJI"]
[Wed Sep 02 19:03:50.734998 2026] [:error] [pid 1150:tid 139877135931136] [client 20.48.250.41:43736] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/02.php"] [unique_id "api5ZlandIN96G83sQa32QAAAcY"]
[Wed Sep 02 19:03:51.951278 2026] [:error] [pid 1150:tid 139877248907008] [client 20.48.250.41:43985] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dev.php"] [unique_id "api5Z1andIN96G83sQa32gAAAcE"]
[Wed Sep 02 19:03:53.173240 2026] [:error] [pid 904:tid 139877077182208] [client 20.48.250.41:44018] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/z60.php"] [unique_id "api5aQ1jFUZnIigSyINIewAAAI0"]
[Wed Sep 02 19:03:54.387972 2026] [:error] [pid 902:tid 139877043611392] [client 20.48.250.41:43822] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/tfm.php"] [unique_id "api5anD3UfRyd6VRADI50AAAABE"]
[Wed Sep 02 19:03:55.602917 2026] [:error] [pid 1072:tid 139877052004096] [client 20.48.250.41:43920] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/2020.php"] [unique_id "api5a1Sr6Dum30GCXcS0HwAAARA"]
[Wed Sep 02 19:03:56.831503 2026] [:error] [pid 1072:tid 139877026825984] [client 20.48.250.41:43830] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jdlqi.php"] [unique_id "api5bFSr6Dum30GCXcS0IQAAARM"]
[Wed Sep 02 19:03:58.072338 2026] [:error] [pid 1024:tid 139876984862464] [client 20.48.250.41:43914] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws49.php"] [unique_id "api5bqwUOJ55hWVbhHkm0AAAANg"]
[Wed Sep 02 19:03:59.353886 2026] [:error] [pid 1150:tid 139877010040576] [client 20.48.250.41:43963] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/global.php"] [unique_id "api5b1andIN96G83sQa35gAAAdU"]
[Wed Sep 02 19:04:00.569326 2026] [:error] [pid 902:tid 139877135931136] [client 20.48.250.41:43797] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/rp8zi.php"] [unique_id "api5cHD3UfRyd6VRADI51AAAAAY"]
[Wed Sep 02 19:04:01.832808 2026] [:error] [pid 1073:tid 139877232121600] [client 20.48.250.41:43999] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/elp.php"] [unique_id "api5cVaa_Qo7NvRGH-CyCAAAAUM"]
[Wed Sep 02 19:04:03.048686 2026] [:error] [pid 1150:tid 139877043611392] [client 20.48.250.41:43894] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/taff.php"] [unique_id "api5c1andIN96G83sQa37gAAAdE"]
[Wed Sep 02 19:04:04.254078 2026] [:error] [pid 904:tid 139877119145728] [client 20.48.250.41:43960] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/45.php"] [unique_id "api5dA1jFUZnIigSyINIgQAAAIg"]
[Wed Sep 02 19:04:05.472721 2026] [:error] [pid 1149:tid 139877085574912] [client 20.48.250.41:43738] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/4.php"] [unique_id "api5de5-Dlx-kBq1C1D_IwAAAYw"]
[Wed Sep 02 19:04:06.695499 2026] [:error] [pid 903:tid 139877052004096] [client 20.48.250.41:43974] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sa.php7"] [unique_id "api5dq_SfnohFj1ZkMFBngAAAFA"]
[Wed Sep 02 19:04:07.905112 2026] [:error] [pid 1024:tid 139877010040576] [client 20.48.250.41:43759] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lzyrj.php"] [unique_id "api5d6wUOJ55hWVbhHkm2gAAANU"]
[Wed Sep 02 19:04:09.124315 2026] [:error] [pid 904:tid 139877240514304] [client 20.48.250.41:43880] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/m.php"] [unique_id "api5eQ1jFUZnIigSyINIkgAAAII"]
[Wed Sep 02 19:04:10.339269 2026] [:error] [pid 1150:tid 139877110753024] [client 20.48.250.41:43910] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fishmen.php"] [unique_id "api5elandIN96G83sQa3-gAAAck"]
[Wed Sep 02 19:04:11.573409 2026] [:error] [pid 902:tid 139877102360320] [client 20.48.250.41:43940] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/includes/phpinfo.php"] [unique_id "api5e3D3UfRyd6VRADI54wAAAAo"]
[Wed Sep 02 19:04:12.789861 2026] [:error] [pid 1150:tid 139877135931136] [client 20.48.250.41:43864] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phrensying.php"] [unique_id "api5fFandIN96G83sQa3_gAAAcY"]
[Wed Sep 02 19:04:14.004145 2026] [:error] [pid 903:tid 139877248907008] [client 20.48.250.41:43965] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/chosen.php"] [unique_id "api5fq_SfnohFj1ZkMFBpAAAAEE"]
[Wed Sep 02 19:04:15.241249 2026] [:error] [pid 1072:tid 139877240514304] [client 20.48.250.41:43955] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/parturiency.php"] [unique_id "api5f1Sr6Dum30GCXcS0KAAAAQI"]
[Wed Sep 02 19:04:16.513179 2026] [:error] [pid 902:tid 139877085574912] [client 20.48.250.41:43818] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/x3.php"] [unique_id "api5gHD3UfRyd6VRADI55gAAAAw"]
[Wed Sep 02 19:04:17.722886 2026] [:error] [pid 904:tid 139877144323840] [client 20.48.250.41:43827] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "api5gQ1jFUZnIigSyINImgAAAIU"]
[Wed Sep 02 19:04:18.940674 2026] [:error] [pid 1024:tid 139877135931136] [client 20.48.250.41:43993] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ww1.php"] [unique_id "api5gqwUOJ55hWVbhHkm5wAAAMY"]
[Wed Sep 02 19:04:20.156849 2026] [:error] [pid 1072:tid 139877144323840] [client 20.48.250.41:43971] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gk.php"] [unique_id "api5hFSr6Dum30GCXcS0LQAAAQU"]
[Wed Sep 02 19:04:21.372808 2026] [:error] [pid 1150:tid 139877119145728] [client 20.48.250.41:43873] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin.php"] [unique_id "api5hVandIN96G83sQa4FwAAAcg"]
[Wed Sep 02 19:04:22.587843 2026] [:error] [pid 1024:tid 139877026825984] [client 20.48.250.41:44002] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gecko.php"] [unique_id "api5hqwUOJ55hWVbhHkm6QAAANM"]
[Wed Sep 02 19:04:23.801929 2026] [:error] [pid 1150:tid 139877240514304] [client 20.48.250.41:43851] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cyanamids.php"] [unique_id "api5h1andIN96G83sQa4IgAAAcI"]
[Wed Sep 02 19:04:25.026121 2026] [:error] [pid 1024:tid 139877018433280] [client 20.48.250.41:43811] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/assets/as.php"] [unique_id "api5iawUOJ55hWVbhHkm6gAAANQ"]
[Wed Sep 02 19:04:26.281906 2026] [:error] [pid 1072:tid 139877035218688] [client 20.48.250.41:43912] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/asciferous.php"] [unique_id "api5ilSr6Dum30GCXcS0MAAAARI"]
[Wed Sep 02 19:04:27.532718 2026] [:error] [pid 1150:tid 139877240514304] [client 20.48.250.41:43968] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/duplicand.php"] [unique_id "api5i1andIN96G83sQa4KQAAAcI"]
[Wed Sep 02 19:04:28.820028 2026] [:error] [pid 1072:tid 139877077182208] [client 20.48.250.41:43907] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/55b76.php"] [unique_id "api5jFSr6Dum30GCXcS0NQAAAQ0"]
[Wed Sep 02 19:04:30.162615 2026] [:error] [pid 903:tid 139876993255168] [client 20.48.250.41:43992] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-bugs.php"] [unique_id "api5jq_SfnohFj1ZkMFBrAAAAFc"]
[Wed Sep 02 19:04:31.523500 2026] [:error] [pid 1024:tid 139877026825984] [client 20.48.250.41:44000] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/anjay.php"] [unique_id "api5j6wUOJ55hWVbhHkm9AAAANM"]
[Wed Sep 02 19:04:32.822144 2026] [:error] [pid 902:tid 139877060396800] [client 20.48.250.41:43888] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/oc460l3x.php"] [unique_id "api5kHD3UfRyd6VRADI57QAAAA8"]
[Wed Sep 02 19:04:34.052115 2026] [:error] [pid 904:tid 139876993255168] [client 20.48.250.41:43923] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/unbefittingly.php"] [unique_id "api5kg1jFUZnIigSyINIoQAAAJc"]
[Wed Sep 02 19:04:35.269768 2026] [:error] [pid 1149:tid 139877093967616] [client 20.48.250.41:43909] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/f.php"] [unique_id "api5k-5-Dlx-kBq1C1D_PAAAAYs"]
[Wed Sep 02 19:04:36.475239 2026] [:error] [pid 902:tid 139877068789504] [client 20.48.250.41:43919] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bolt.php"] [unique_id "api5lHD3UfRyd6VRADI57wAAAA4"]
[Wed Sep 02 19:04:37.701365 2026] [:error] [pid 1150:tid 139877152716544] [client 20.48.250.41:43976] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "api5lVandIN96G83sQa4OQAAAcQ"]
[Wed Sep 02 19:04:38.948491 2026] [:error] [pid 1072:tid 139877144323840] [client 20.48.250.41:44006] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fifi.php"] [unique_id "api5llSr6Dum30GCXcS0NwAAAQU"]
[Wed Sep 02 19:04:40.152797 2026] [:error] [pid 904:tid 139877144323840] [client 20.48.250.41:43871] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xxa.php"] [unique_id "api5mA1jFUZnIigSyINIogAAAIU"]
[Wed Sep 02 19:04:41.418150 2026] [:error] [pid 1072:tid 139877001647872] [client 20.48.250.41:43982] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/god4m.php"] [unique_id "api5mVSr6Dum30GCXcS0OAAAARY"]
[Wed Sep 02 19:04:42.644508 2026] [:error] [pid 1024:tid 139877035218688] [client 20.48.250.41:43970] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ouh.php"] [unique_id "api5mqwUOJ55hWVbhHkm-wAAANI"]
[Wed Sep 02 19:04:43.854429 2026] [:error] [pid 1072:tid 139877068789504] [client 20.48.250.41:43911] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lm18.php"] [unique_id "api5m1Sr6Dum30GCXcS0OwAAAQ4"]
[Wed Sep 02 19:04:45.070491 2026] [:error] [pid 1150:tid 139876993255168] [client 20.48.250.41:44020] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/.well-known/admin.php"] [unique_id "api5nVandIN96G83sQa4RgAAAdc"]
[Wed Sep 02 19:04:46.287038 2026] [:error] [pid 1024:tid 139877248907008] [client 20.48.250.41:43858] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ioxi-o.php"] [unique_id "api5nqwUOJ55hWVbhHknAQAAAME"]
[Wed Sep 02 19:04:47.490409 2026] [:error] [pid 1072:tid 139877232121600] [client 20.48.250.41:43996] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/an.php"] [unique_id "api5n1Sr6Dum30GCXcS0PQAAAQM"]
[Wed Sep 02 19:04:48.727558 2026] [:error] [pid 902:tid 139877068789504] [client 20.48.250.41:43773] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/s.php"] [unique_id "api5oHD3UfRyd6VRADI59AAAAA4"]
[Wed Sep 02 19:04:49.955986 2026] [:error] [pid 1150:tid 139877102360320] [client 20.48.250.41:43950] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/themes/index.php"] [unique_id "api5oVandIN96G83sQa4VwAAAco"]
[Wed Sep 02 19:04:51.173491 2026] [:error] [pid 1150:tid 139877248907008] [client 20.48.250.41:43930] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/okxh.php"] [unique_id "api5o1andIN96G83sQa4WQAAAcE"]
[Wed Sep 02 19:04:52.406844 2026] [:error] [pid 1150:tid 139877257299712] [client 20.48.250.41:43921] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/zoko.php"] [unique_id "api5pFandIN96G83sQa4XQAAAcA"]
[Wed Sep 02 19:04:53.637152 2026] [:error] [pid 1024:tid 139877248907008] [client 20.48.250.41:44030] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zr.php"] [unique_id "api5pawUOJ55hWVbhHknDAAAAME"]
[Wed Sep 02 19:04:55.187571 2026] [:error] [pid 1150:tid 139877135931136] [client 20.48.250.41:44017] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "api5p1andIN96G83sQa4YQAAAcY"]
[Wed Sep 02 19:04:56.435738 2026] [:error] [pid 1024:tid 139877010040576] [client 20.48.250.41:43672] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pNRzcP6wtYy.php"] [unique_id "api5qKwUOJ55hWVbhHknEwAAANU"]
[Wed Sep 02 19:04:57.640855 2026] [:error] [pid 1072:tid 139877068789504] [client 20.48.250.41:43840] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/edit-tags.php"] [unique_id "api5qVSr6Dum30GCXcS0PwAAAQ4"]
[Wed Sep 02 19:04:58.856542 2026] [:error] [pid 1024:tid 139877152716544] [client 20.48.250.41:43846] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mg.php"] [unique_id "api5qqwUOJ55hWVbhHknFwAAAMQ"]
[Wed Sep 02 19:05:00.116240 2026] [:error] [pid 903:tid 139877001647872] [client 20.48.250.41:43765] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/doti.php"] [unique_id "api5rK_SfnohFj1ZkMFBtAAAAFY"]
[Wed Sep 02 19:05:01.320967 2026] [:error] [pid 1024:tid 139877068789504] [client 20.48.250.41:44010] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bak.php"] [unique_id "api5rawUOJ55hWVbhHknHQAAAM4"]
[Wed Sep 02 19:05:02.525981 2026] [:error] [pid 902:tid 139877010040576] [client 20.48.250.41:44029] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-png.php"] [unique_id "api5rnD3UfRyd6VRADI6BgAAABU"]
[Wed Sep 02 19:05:03.740845 2026] [:error] [pid 1150:tid 139877144323840] [client 20.48.250.41:43938] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nope.php"] [unique_id "api5r1andIN96G83sQa4cAAAAcU"]
[Wed Sep 02 19:05:04.959760 2026] [:error] [pid 1149:tid 139877026825984] [client 20.48.250.41:43946] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gelay.php"] [unique_id "api5sO5-Dlx-kBq1C1D_SwAAAZM"]
[Wed Sep 02 19:05:06.191282 2026] [:error] [pid 1024:tid 139877232121600] [client 20.48.250.41:43932] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hbyra.php"] [unique_id "api5sqwUOJ55hWVbhHknJAAAAMM"]
[Wed Sep 02 19:05:07.408069 2026] [:error] [pid 1150:tid 139877052004096] [client 20.48.250.41:43908] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/33.php"] [unique_id "api5s1andIN96G83sQa4eQAAAdA"]
[Wed Sep 02 19:05:08.641616 2026] [:error] [pid 904:tid 139877240514304] [client 20.48.250.41:43942] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "api5tA1jFUZnIigSyINIrgAAAII"]
[Wed Sep 02 19:05:09.859466 2026] [:error] [pid 1024:tid 139877026825984] [client 20.48.250.41:43778] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/index/fucku.php"] [unique_id "api5tawUOJ55hWVbhHknKQAAANM"]
[Wed Sep 02 19:05:11.089287 2026] [:error] [pid 1150:tid 139877257299712] [client 20.48.250.41:43959] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fm2.php"] [unique_id "api5t1andIN96G83sQa4gAAAAcA"]
[Wed Sep 02 19:05:12.302918 2026] [:error] [pid 1073:tid 139876984862464] [client 20.48.250.41:43962] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/setup-config.php"] [unique_id "api5uFaa_Qo7NvRGH-CyMAAAAVg"]
[Wed Sep 02 19:05:13.511109 2026] [:error] [pid 1150:tid 139877001647872] [client 20.48.250.41:43979] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin.php"] [unique_id "api5uVandIN96G83sQa4kgAAAdY"]
[Wed Sep 02 19:05:14.761899 2026] [:error] [pid 1073:tid 139877093967616] [client 20.48.250.41:43931] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/acp.php"] [unique_id "api5ulaa_Qo7NvRGH-CyNQAAAUs"]
[Wed Sep 02 19:05:16.023362 2026] [:error] [pid 902:tid 139876993255168] [client 20.48.250.41:43947] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/Contrller.php"] [unique_id "api5vHD3UfRyd6VRADI6KgAAABc"]
[Wed Sep 02 19:05:17.242618 2026] [:error] [pid 1073:tid 139877127538432] [client 20.48.250.41:44028] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/autoload_classmap.php"] [unique_id "api5vVaa_Qo7NvRGH-CyOgAAAUc"]
[Wed Sep 02 19:05:18.481544 2026] [:error] [pid 904:tid 139877232121600] [client 20.48.250.41:43995] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin-header.php"] [unique_id "api5vg1jFUZnIigSyINIxAAAAIM"]
[Wed Sep 02 19:05:19.690704 2026] [:error] [pid 1150:tid 139877026825984] [client 20.48.250.41:43896] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pent.php"] [unique_id "api5v1andIN96G83sQa4vAAAAdM"]
[Wed Sep 02 19:05:20.902123 2026] [:error] [pid 1024:tid 139877110753024] [client 20.48.250.41:43988] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/poliomyelopathy.php"] [unique_id "api5wKwUOJ55hWVbhHknbwAAAMk"]
[Wed Sep 02 19:05:22.171058 2026] [:error] [pid 1072:tid 139877077182208] [client 20.48.250.41:43941] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/maint/about.php"] [unique_id "api5wlSr6Dum30GCXcS0bwAAAQ0"]
[Wed Sep 02 19:05:23.401752 2026] [:error] [pid 1150:tid 139877068789504] [client 20.48.250.41:44027] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pepe.php"] [unique_id "api5w1andIN96G83sQa42wAAAc4"]
[Wed Sep 02 19:05:24.608821 2026] [:error] [pid 1073:tid 139877085574912] [client 20.48.250.41:43986] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws66.php"] [unique_id "api5xFaa_Qo7NvRGH-CybQAAAUw"]
[Wed Sep 02 19:05:25.829889 2026] [:error] [pid 1150:tid 139877043611392] [client 20.48.250.41:43868] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kao.php"] [unique_id "api5xVandIN96G83sQa47wAAAdE"]
[Wed Sep 02 19:05:27.066828 2026] [:error] [pid 1149:tid 139877052004096] [client 20.48.250.41:43972] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wsd.php"] [unique_id "api5x-5-Dlx-kBq1C1D_eAAAAZA"]
[Wed Sep 02 19:05:28.289157 2026] [:error] [pid 1073:tid 139877240514304] [client 20.48.250.41:43980] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ms.php"] [unique_id "api5yFaa_Qo7NvRGH-CyjgAAAUI"]
[Wed Sep 02 19:05:29.491022 2026] [:error] [pid 902:tid 139877119145728] [client 20.48.250.41:43933] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws85.php"] [unique_id "api5yXD3UfRyd6VRADI6cQAAAAg"]
[Wed Sep 02 19:05:30.695714 2026] [:error] [pid 1073:tid 139877144323840] [client 20.48.250.41:43998] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ff1.php"] [unique_id "api5ylaa_Qo7NvRGH-CyqwAAAUU"]
[Wed Sep 02 19:05:31.914737 2026] [:error] [pid 1024:tid 139877127538432] [client 20.48.250.41:43842] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/areak1.php"] [unique_id "api5y6wUOJ55hWVbhHknxAAAAMc"]
[Wed Sep 02 19:05:33.129758 2026] [:error] [pid 1149:tid 139877240514304] [client 20.48.250.41:43954] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ssxsl.php"] [unique_id "api5ze5-Dlx-kBq1C1D_nwAAAYI"]
[Wed Sep 02 19:05:34.402503 2026] [:error] [pid 1073:tid 139877257299712] [client 20.48.250.41:43856] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "api5zlaa_Qo7NvRGH-CyxwAAAUA"]
[Wed Sep 02 19:05:35.660950 2026] [:error] [pid 1024:tid 139877127538432] [client 20.48.250.41:44001] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/shop.php"] [unique_id "api5z6wUOJ55hWVbhHkn3AAAAMc"]
[Wed Sep 02 19:05:36.904787 2026] [:error] [pid 902:tid 139877077182208] [client 20.48.250.41:44016] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/NWqz649FIe7.php"] [unique_id "api50HD3UfRyd6VRADI6pgAAAA0"]
[Wed Sep 02 19:05:38.205241 2026] [:error] [pid 902:tid 139877001647872] [client 20.48.250.41:43989] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/r79.php"] [unique_id "api50nD3UfRyd6VRADI6rwAAABY"]
[Wed Sep 02 19:05:39.514794 2026] [:error] [pid 1072:tid 139877232121600] [client 20.48.250.41:43803] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/l3gi0n.php"] [unique_id "api501Sr6Dum30GCXcS0_AAAAQM"]
[Wed Sep 02 19:05:40.822288 2026] [:error] [pid 1149:tid 139876984862464] [client 20.48.250.41:43945] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wpo.php"] [unique_id "api51O5-Dlx-kBq1C1D_4QAAAZg"]
[Wed Sep 02 19:05:42.106605 2026] [:error] [pid 1149:tid 139877001647872] [client 20.48.250.41:43867] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lib.php"] [unique_id "api51u5-Dlx-kBq1C1D_7AAAAZY"]
[Wed Sep 02 19:05:43.517682 2026] [:error] [pid 904:tid 139876984862464] [client 20.48.250.41:43789] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/js/index.php"] [unique_id "api51w1jFUZnIigSyINJUQAAAJg"]
[Wed Sep 02 19:05:44.855672 2026] [:error] [pid 903:tid 139877257299712] [client 20.48.250.41:43948] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws67.php"] [unique_id "api52K_SfnohFj1ZkMFClQAAAEA"]
[Wed Sep 02 19:05:46.103918 2026] [:error] [pid 903:tid 139877119145728] [client 20.48.250.41:43788] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/RIP.php"] [unique_id "api52q_SfnohFj1ZkMFCpAAAAEg"]
[Wed Sep 02 19:05:47.625088 2026] [:error] [pid 1024:tid 139876993255168] [client 20.48.250.41:43952] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/admin.php"] [unique_id "api526wUOJ55hWVbhHkoPgAAANc"]
[Wed Sep 02 19:05:48.832139 2026] [:error] [pid 903:tid 139877035218688] [client 20.48.250.41:43991] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aduot.php"] [unique_id "api53K_SfnohFj1ZkMFCxAAAAFI"]
[Wed Sep 02 19:05:50.204277 2026] [:error] [pid 902:tid 139877035218688] [client 20.48.250.41:43913] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kyami.php"] [unique_id "api53nD3UfRyd6VRADI7FQAAABI"]
[Wed Sep 02 19:05:51.505838 2026] [:error] [pid 903:tid 139877043611392] [client 20.48.250.41:43859] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/56c53.php"] [unique_id "api536_SfnohFj1ZkMFC2QAAAFE"]
[Wed Sep 02 19:05:52.805814 2026] [:error] [pid 1073:tid 139877240514304] [client 20.48.250.41:43792] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/rupvs.php"] [unique_id "api54Faa_Qo7NvRGH-CzaAAAAUI"]
[Wed Sep 02 19:05:54.135347 2026] [:error] [pid 1149:tid 139877102360320] [client 20.48.250.41:43981] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/logs.php"] [unique_id "api54u5-Dlx-kBq1C1AAWAAAAYo"]
[Wed Sep 02 19:05:55.412479 2026] [:error] [pid 903:tid 139877001647872] [client 20.48.250.41:43714] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "api546_SfnohFj1ZkMFC-QAAAFY"]
[Wed Sep 02 19:05:56.709011 2026] [:error] [pid 1073:tid 139877257299712] [client 20.48.250.41:43790] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/miru3.php"] [unique_id "api55Faa_Qo7NvRGH-CzgwAAAUA"]
[Wed Sep 02 19:05:58.014172 2026] [:error] [pid 1024:tid 139877026825984] [client 20.48.250.41:43929] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ahax.php"] [unique_id "api55qwUOJ55hWVbhHkokgAAANM"]
[Wed Sep 02 19:05:59.307322 2026] [:error] [pid 1072:tid 139877135931136] [client 20.48.250.41:43777] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mob.php"] [unique_id "api551Sr6Dum30GCXcS1jwAAAQY"]
[Wed Sep 02 19:06:00.709531 2026] [:error] [pid 1150:tid 139877060396800] [client 20.48.250.41:43783] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/god.php"] [unique_id "api56FandIN96G83sQa57AAAAc8"]
[Wed Sep 02 19:06:02.084742 2026] [:error] [pid 1150:tid 139877077182208] [client 20.48.250.41:43957] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo.php.tmp"] [unique_id "api56landIN96G83sQa59wAAAc0"]
[Wed Sep 02 19:06:03.308416 2026] [:error] [pid 1072:tid 139877001647872] [client 20.48.250.41:43915] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/tesTyuj.php"] [unique_id "api561Sr6Dum30GCXcS1sAAAARY"]
[Wed Sep 02 19:06:04.604264 2026] [:error] [pid 1073:tid 139877144323840] [client 20.48.250.41:43828] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dox.php"] [unique_id "api57Faa_Qo7NvRGH-CztAAAAUU"]
[Wed Sep 02 19:06:05.832654 2026] [:error] [pid 1072:tid 139877001647872] [client 20.48.250.41:43776] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/unbalanceable.php"] [unique_id "api57VSr6Dum30GCXcS1xAAAARY"]
[Wed Sep 02 19:06:07.109111 2026] [:error] [pid 903:tid 139877093967616] [client 20.48.250.41:43755] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/term.php"] [unique_id "api576_SfnohFj1ZkMFDUwAAAEs"]
[Wed Sep 02 19:06:08.524192 2026] [:error] [pid 1149:tid 139877119145728] [client 20.48.250.41:44022] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/vbv.php"] [unique_id "api58O5-Dlx-kBq1C1AAuAAAAYg"]
[Wed Sep 02 19:06:09.818911 2026] [:error] [pid 903:tid 139877060396800] [client 20.48.250.41:43749] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "api58a_SfnohFj1ZkMFDawAAAE8"]
[Wed Sep 02 19:06:11.109776 2026] [:error] [pid 1024:tid 139877035218688] [client 20.48.250.41:43862] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/knme.php"] [unique_id "api586wUOJ55hWVbhHkpAwAAANI"]
[Wed Sep 02 19:06:12.411470 2026] [:error] [pid 1024:tid 139877010040576] [client 20.48.250.41:43966] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/khgdl.php"] [unique_id "api59KwUOJ55hWVbhHkpDQAAANU"]
[Wed Sep 02 19:06:13.627761 2026] [:error] [pid 1149:tid 139877232121600] [client 20.48.250.41:44025] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gifclass.php"] [unique_id "api59e5-Dlx-kBq1C1AA1QAAAYM"]
[Wed Sep 02 19:06:14.927963 2026] [:error] [pid 1150:tid 139877026825984] [client 20.48.250.41:44004] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/assets/index.php"] [unique_id "api59landIN96G83sQa6VgAAAdM"]
[Wed Sep 02 19:06:16.209671 2026] [:error] [pid 1150:tid 139877119145728] [client 20.48.250.41:43901] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bak.php"] [unique_id "api5-FandIN96G83sQa6YQAAAcg"]
[Wed Sep 02 19:06:17.849932 2026] [:error] [pid 1024:tid 139877119145728] [client 20.48.250.41:43964] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sx.php"] [unique_id "api5-awUOJ55hWVbhHkpMQAAAMg"]
[Wed Sep 02 19:06:19.116489 2026] [:error] [pid 1150:tid 139877240514304] [client 20.48.250.41:43975] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws56.php"] [unique_id "api5-1andIN96G83sQa6aQAAAcI"]
[Wed Sep 02 19:06:20.420739 2026] [:error] [pid 903:tid 139877144323840] [client 20.48.250.41:43899] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "api5_K_SfnohFj1ZkMFDqwAAAEU"]
[Wed Sep 02 19:06:21.717137 2026] [:error] [pid 1150:tid 139877085574912] [client 20.48.250.41:43782] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/redi.php"] [unique_id "api5_VandIN96G83sQa6fwAAAcw"]
[Wed Sep 02 19:06:23.131706 2026] [:error] [pid 1072:tid 139877077182208] [client 20.48.250.41:43878] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/atex1.php"] [unique_id "api5_1Sr6Dum30GCXcS2PQAAAQ0"]
[Wed Sep 02 19:06:24.410989 2026] [:error] [pid 1072:tid 139877102360320] [client 20.48.250.41:43854] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/newfile.php"] [unique_id "api6AFSr6Dum30GCXcS2QwAAAQo"]
[Wed Sep 02 19:06:25.914805 2026] [:error] [pid 902:tid 139877001647872] [client 20.48.250.41:43935] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ppk.php"] [unique_id "api6AXD3UfRyd6VRADI77QAAABY"]
[Wed Sep 02 19:06:27.213226 2026] [:error] [pid 902:tid 139877018433280] [client 20.48.250.41:43855] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ss.php"] [unique_id "api6A3D3UfRyd6VRADI78AAAABQ"]
[Wed Sep 02 19:06:28.444931 2026] [:error] [pid 902:tid 139877257299712] [client 20.48.250.41:43816] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xqq.php"] [unique_id "api6BHD3UfRyd6VRADI7-QAAAAA"]
[Wed Sep 02 19:06:29.710705 2026] [:error] [pid 1149:tid 139877093967616] [client 20.48.250.41:44023] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws71.php"] [unique_id "api6Be5-Dlx-kBq1C1ABQQAAAYs"]
[Wed Sep 02 19:06:31.012335 2026] [:error] [pid 903:tid 139877043611392] [client 20.48.250.41:43958] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-good.php"] [unique_id "api6B6_SfnohFj1ZkMFD6AAAAFE"]
[Wed Sep 02 19:06:32.318120 2026] [:error] [pid 1150:tid 139876993255168] [client 20.48.250.41:43821] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ww5.php"] [unique_id "api6CFandIN96G83sQa62QAAAdc"]
[Wed Sep 02 19:06:33.608219 2026] [:error] [pid 903:tid 139877152716544] [client 20.48.250.41:43817] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/inputs.php"] [unique_id "api6Ca_SfnohFj1ZkMFD-gAAAEQ"]
[Wed Sep 02 19:06:34.929910 2026] [:error] [pid 902:tid 139877248907008] [client 20.48.250.41:43874] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/qV9GbcJwZgK.php"] [unique_id "api6CnD3UfRyd6VRADI8MAAAAAE"]
[Wed Sep 02 19:06:36.163571 2026] [:error] [pid 1024:tid 139877144323840] [client 20.48.250.41:43978] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-title.php"] [unique_id "api6DKwUOJ55hWVbhHkpqQAAAMU"]
[Wed Sep 02 19:06:37.402036 2026] [:error] [pid 1149:tid 139877043611392] [client 20.48.250.41:43939] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/oxse.php"] [unique_id "api6De5-Dlx-kBq1C1ABegAAAZE"]
[Wed Sep 02 19:06:38.650900 2026] [:error] [pid 1073:tid 139877085574912] [client 20.48.250.41:43849] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hplfuns.php"] [unique_id "api6Dlaa_Qo7NvRGH-C0hAAAAUw"]
[Wed Sep 02 19:06:39.902611 2026] [:error] [pid 903:tid 139877043611392] [client 20.48.250.41:44031] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/alfa-shell-v4.php"] [unique_id "api6D6_SfnohFj1ZkMFEKAAAAFE"]
[Wed Sep 02 19:06:41.117869 2026] [:error] [pid 1024:tid 139877232121600] [client 20.48.250.41:43857] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lp6.php"] [unique_id "api6EawUOJ55hWVbhHkp0gAAAMM"]
[Wed Sep 02 19:06:42.348000 2026] [:error] [pid 902:tid 139877068789504] [client 20.48.250.41:43943] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/install.php"] [unique_id "api6EnD3UfRyd6VRADI8ZAAAAA4"]
[Wed Sep 02 19:06:43.621725 2026] [:error] [pid 1150:tid 139877102360320] [client 20.48.250.41:44019] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/vanda.php"] [unique_id "api6E1andIN96G83sQa7OQAAAco"]
[Wed Sep 02 19:06:44.846030 2026] [:error] [pid 1150:tid 139877144323840] [client 20.48.250.41:43799] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "api6FFandIN96G83sQa7QwAAAcU"]
[Wed Sep 02 19:06:46.102988 2026] [:error] [pid 1150:tid 139877010040576] [client 20.48.250.41:43987] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/qsntqiho.php"] [unique_id "api6FlandIN96G83sQa7UQAAAdU"]
[Wed Sep 02 19:06:47.305827 2026] [:error] [pid 1150:tid 139877043611392] [client 20.48.250.41:43990] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/erty.php"] [unique_id "api6F1andIN96G83sQa7XAAAAdE"]
[Wed Sep 02 19:06:48.527165 2026] [:error] [pid 902:tid 139877010040576] [client 20.48.250.41:43838] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/new4.php"] [unique_id "api6GHD3UfRyd6VRADI8kwAAABU"]
[Wed Sep 02 19:06:49.740509 2026] [:error] [pid 903:tid 139877102360320] [client 20.48.250.41:43937] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/miso.php"] [unique_id "api6Ga_SfnohFj1ZkMFEVAAAAEo"]
[Wed Sep 02 19:06:50.956122 2026] [:error] [pid 903:tid 139877052004096] [client 20.48.250.41:43883] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kaza.php"] [unique_id "api6Gq_SfnohFj1ZkMFEWgAAAFA"]
[Wed Sep 02 19:06:52.206991 2026] [:error] [pid 903:tid 139877052004096] [client 20.48.250.41:43678] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/dx.php"] [unique_id "api6HK_SfnohFj1ZkMFEYgAAAFA"]
[Wed Sep 02 19:06:53.503479 2026] [:error] [pid 903:tid 139877035218688] [client 20.48.250.41:43905] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/t.php"] [unique_id "api6Ha_SfnohFj1ZkMFEaAAAAFI"]
[Wed Sep 02 19:06:54.743729 2026] [:error] [pid 1150:tid 139877102360320] [client 20.48.250.41:43927] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws58.php"] [unique_id "api6HlandIN96G83sQa7iwAAAco"]
[Wed Sep 02 19:06:56.002675 2026] [:error] [pid 903:tid 139877052004096] [client 20.48.250.41:43843] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php_info.php~"] [unique_id "api6IK_SfnohFj1ZkMFEcQAAAFA"]
[Wed Sep 02 19:06:57.303317 2026] [:error] [pid 1150:tid 139877144323840] [client 20.48.250.41:43884] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-rss4.php"] [unique_id "api6IVandIN96G83sQa7lwAAAcU"]
[Wed Sep 02 19:06:58.521495 2026] [:error] [pid 1149:tid 139877026825984] [client 20.48.250.41:43961] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/s.php"] [unique_id "api6Iu5-Dlx-kBq1C1ABxAAAAZM"]
[Wed Sep 02 19:06:59.812923 2026] [:error] [pid 1073:tid 139877152716544] [client 20.48.250.41:43969] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pss.php"] [unique_id "api6I1aa_Qo7NvRGH-C04wAAAUQ"]
[Wed Sep 02 19:07:01.107024 2026] [:error] [pid 903:tid 139877018433280] [client 20.48.250.41:43712] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/s12.php"] [unique_id "api6Ja_SfnohFj1ZkMFEjwAAAFQ"]
[Wed Sep 02 19:07:02.348850 2026] [:error] [pid 1150:tid 139877093967616] [client 20.48.250.41:43779] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/errorfile.php"] [unique_id "api6JlandIN96G83sQa7ugAAAcs"]
[Wed Sep 02 19:07:03.603966 2026] [:error] [pid 1073:tid 139877257299712] [client 20.48.250.41:43944] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pp.php"] [unique_id "api6J1aa_Qo7NvRGH-C1CAAAAUA"]
[Wed Sep 02 19:07:04.841588 2026] [:error] [pid 1073:tid 139877018433280] [client 20.48.250.41:43956] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public/bootstrap.php"] [unique_id "api6KFaa_Qo7NvRGH-C1DwAAAVQ"]
[Wed Sep 02 19:07:06.069461 2026] [:error] [pid 902:tid 139877135931136] [client 20.48.250.41:43892] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/blurbs18.php"] [unique_id "api6KnD3UfRyd6VRADI80wAAAAY"]
[Wed Sep 02 19:07:07.314876 2026] [:error] [pid 1024:tid 139876993255168] [client 20.48.250.41:43860] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/av.php"] [unique_id "api6K6wUOJ55hWVbhHkqYAAAANc"]
[Wed Sep 02 19:07:08.539031 2026] [:error] [pid 1073:tid 139877135931136] [client 20.48.250.41:43879] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ioxi002.PhP7"] [unique_id "api6LFaa_Qo7NvRGH-C1KwAAAUY"]
[Wed Sep 02 19:07:09.754069 2026] [:error] [pid 903:tid 139877001647872] [client 20.48.250.41:43784] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-64wscx6shd.php"] [unique_id "api6La_SfnohFj1ZkMFEzgAAAFY"]
[Wed Sep 02 19:07:11.014602 2026] [:error] [pid 1150:tid 139877052004096] [client 20.48.250.41:43922] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "api6L1andIN96G83sQa77AAAAdA"]
[Wed Sep 02 19:07:12.302812 2026] [:error] [pid 1073:tid 139877043611392] [client 20.48.250.41:43750] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/callback.php"] [unique_id "api6MFaa_Qo7NvRGH-C1QQAAAVE"]
[Wed Sep 02 19:07:13.514512 2026] [:error] [pid 1150:tid 139877093967616] [client 20.48.250.41:43791] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/asasx.php"] [unique_id "api6MVandIN96G83sQa7-gAAAcs"]
[Wed Sep 02 19:07:14.755925 2026] [:error] [pid 1073:tid 139877026825984] [client 20.48.250.41:43881] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/v.php"] [unique_id "api6Mlaa_Qo7NvRGH-C1VQAAAVM"]
[Wed Sep 02 19:07:16.010750 2026] [:error] [pid 904:tid 139877035218688] [client 20.48.250.41:43829] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/f8moue.php"] [unique_id "api6NA1jFUZnIigSyINLWgAAAJI"]
[Wed Sep 02 19:07:17.218773 2026] [:error] [pid 1072:tid 139877152716544] [client 20.48.250.41:43841] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/index/function.php"] [unique_id "api6NVSr6Dum30GCXcS27wAAAQQ"]
[Wed Sep 02 19:07:18.437710 2026] [:error] [pid 1150:tid 139877240514304] [client 20.48.250.41:43832] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/motu.php"] [unique_id "api6NlandIN96G83sQa8JAAAAcI"]
[Wed Sep 02 19:07:19.706778 2026] [:error] [pid 1073:tid 139877043611392] [client 20.48.250.41:43656] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/8xg5Bv6XIUw.php"] [unique_id "api6N1aa_Qo7NvRGH-C1cgAAAVE"]
[Wed Sep 02 19:07:20.926054 2026] [:error] [pid 1073:tid 139877232121600] [client 20.48.250.41:43906] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wan.php"] [unique_id "api6OFaa_Qo7NvRGH-C1eQAAAUM"]
[Wed Sep 02 19:07:22.131672 2026] [:error] [pid 904:tid 139877035218688] [client 20.48.250.41:43800] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/grsiuk.php"] [unique_id "api6Og1jFUZnIigSyINLeAAAAJI"]
[Wed Sep 02 19:07:23.335684 2026] [:error] [pid 902:tid 139877110753024] [client 20.48.250.41:43718] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/abc.php"] [unique_id "api6O3D3UfRyd6VRADI9CAAAAAk"]
[Wed Sep 02 19:07:24.548703 2026] [:error] [pid 1073:tid 139877060396800] [client 20.48.250.41:43850] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/co.php"] [unique_id "api6PFaa_Qo7NvRGH-C1mAAAAU8"]
[Wed Sep 02 19:07:25.802210 2026] [:error] [pid 903:tid 139877127538432] [client 20.48.250.41:44021] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/buy.php"] [unique_id "api6Pa_SfnohFj1ZkMFFAgAAAEc"]
[Wed Sep 02 19:07:27.032779 2026] [:error] [pid 902:tid 139877085574912] [client 20.48.250.41:43924] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gel4y.php"] [unique_id "api6P3D3UfRyd6VRADI9FAAAAAw"]
[Wed Sep 02 19:07:28.302827 2026] [:error] [pid 903:tid 139877060396800] [client 20.48.250.41:43897] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/FSCMNvnjPX4.php"] [unique_id "api6QK_SfnohFj1ZkMFFCgAAAE8"]
[Wed Sep 02 19:07:29.537906 2026] [:error] [pid 904:tid 139877110753024] [client 20.48.250.41:43866] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gecko-litespeed.php"] [unique_id "api6QQ1jFUZnIigSyINLrgAAAIk"]
[Wed Sep 02 19:07:30.805758 2026] [:error] [pid 903:tid 139877085574912] [client 20.48.250.41:43852] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wteed.php"] [unique_id "api6Qq_SfnohFj1ZkMFFHgAAAEw"]
[Wed Sep 02 19:07:32.045442 2026] [:error] [pid 904:tid 139877135931136] [client 20.48.250.41:43804] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/test1.php"] [unique_id "api6RA1jFUZnIigSyINLvAAAAIY"]
[Wed Sep 02 19:07:33.303128 2026] [:error] [pid 903:tid 139877052004096] [client 20.48.250.41:44013] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/b.php"] [unique_id "api6Ra_SfnohFj1ZkMFFNAAAAFA"]
[Wed Sep 02 19:07:34.532707 2026] [:error] [pid 902:tid 139877257299712] [client 20.48.250.41:43898] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/asd.php"] [unique_id "api6RnD3UfRyd6VRADI9HgAAAAA"]
[Wed Sep 02 19:07:35.744249 2026] [:error] [pid 904:tid 139877043611392] [client 20.48.250.41:43967] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/tires.php"] [unique_id "api6Rw1jFUZnIigSyINL3AAAAJE"]
[Wed Sep 02 19:07:37.001823 2026] [:error] [pid 1073:tid 139877257299712] [client 20.48.250.41:43887] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bnm.php"] [unique_id "api6SVaa_Qo7NvRGH-C15gAAAUA"]
[Wed Sep 02 19:07:38.227204 2026] [:error] [pid 904:tid 139877035218688] [client 20.48.250.41:43890] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/alf.php"] [unique_id "api6Sg1jFUZnIigSyINL6AAAAJI"]
[Wed Sep 02 19:07:39.502908 2026] [:error] [pid 904:tid 139877110753024] [client 20.48.250.41:44011] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/pyrometry.php"] [unique_id "api6Sw1jFUZnIigSyINL7gAAAIk"]
[Wed Sep 02 19:07:40.718355 2026] [:error] [pid 903:tid 139877010040576] [client 20.48.250.41:43997] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/166.php"] [unique_id "api6TK_SfnohFj1ZkMFFXAAAAFU"]
[Wed Sep 02 19:07:41.929723 2026] [:error] [pid 904:tid 139876984862464] [client 20.48.250.41:43844] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/error_log.php"] [unique_id "api6TQ1jFUZnIigSyINL_AAAAJg"]
[Wed Sep 02 19:07:43.160857 2026] [:error] [pid 902:tid 139876993255168] [client 20.48.250.41:43895] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mpxct.php"] [unique_id "api6T3D3UfRyd6VRADI9MgAAABc"]
[Wed Sep 02 19:07:44.399804 2026] [:error] [pid 903:tid 139877026825984] [client 20.48.250.41:43794] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/66.php"] [unique_id "api6UK_SfnohFj1ZkMFFbQAAAFM"]
[Wed Sep 02 19:07:45.621934 2026] [:error] [pid 903:tid 139877052004096] [client 20.48.250.41:43785] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "api6Ua_SfnohFj1ZkMFFdAAAAFA"]
[Wed Sep 02 19:07:46.842460 2026] [:error] [pid 1150:tid 139877232121600] [client 20.48.250.41:43839] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/485.php"] [unique_id "api6UlandIN96G83sQa8hwAAAcM"]
[Wed Sep 02 19:07:48.107106 2026] [:error] [pid 902:tid 139877052004096] [client 20.48.250.41:43659] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/tBEZGQz.php"] [unique_id "api6VHD3UfRyd6VRADI9QgAAABA"]
[Wed Sep 02 19:07:49.356597 2026] [:error] [pid 904:tid 139877119145728] [client 20.48.250.41:43836] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/er.php"] [unique_id "api6VQ1jFUZnIigSyINMGAAAAIg"]
[Wed Sep 02 19:07:50.572947 2026] [:error] [pid 904:tid 139877119145728] [client 20.48.250.41:43808] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/byp403.php"] [unique_id "api6Vg1jFUZnIigSyINMHAAAAIg"]
[Wed Sep 02 19:07:51.774835 2026] [:error] [pid 1149:tid 139877232121600] [client 20.48.250.41:44007] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/z123.php"] [unique_id "api6V-5-Dlx-kBq1C1ACVgAAAYM"]
[Wed Sep 02 19:07:53.010260 2026] [:error] [pid 1149:tid 139877010040576] [client 20.48.250.41:43809] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/0x.php"] [unique_id "api6We5-Dlx-kBq1C1ACXQAAAZU"]
[Wed Sep 02 19:07:54.250738 2026] [:error] [pid 1149:tid 139877135931136] [client 20.48.250.41:43848] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/lock360.php"] [unique_id "api6Wu5-Dlx-kBq1C1ACZAAAAYY"]
[Wed Sep 02 19:07:55.506487 2026] [:error] [pid 903:tid 139877127538432] [client 20.48.250.41:43812] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fifii.php"] [unique_id "api6W6_SfnohFj1ZkMFFoAAAAEc"]
[Wed Sep 02 19:07:56.722212 2026] [:error] [pid 1073:tid 139877068789504] [client 20.48.250.41:43725] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminer-4.6.1-mysql.php"] [unique_id "api6XFaa_Qo7NvRGH-C2FwAAAU4"]
[Wed Sep 02 19:07:57.939781 2026] [:error] [pid 904:tid 139877119145728] [client 20.48.250.41:43869] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/oitava.php"] [unique_id "api6XQ1jFUZnIigSyINMMAAAAIg"]
[Wed Sep 02 19:07:59.158195 2026] [:error] [pid 1150:tid 139877052004096] [client 20.48.250.41:43885] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-mail.php"] [unique_id "api6X1andIN96G83sQa8mgAAAdA"]
[Wed Sep 02 19:08:00.401509 2026] [:error] [pid 1073:tid 139877052004096] [client 20.48.250.41:43717] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-act.php"] [unique_id "api6YFaa_Qo7NvRGH-C2KAAAAVA"]
[Wed Sep 02 19:08:01.623871 2026] [:error] [pid 1024:tid 139877135931136] [client 20.48.250.41:44005] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wsr2.php"] [unique_id "api6YawUOJ55hWVbhHkq5QAAAMY"]
[Wed Sep 02 19:08:02.840693 2026] [:error] [pid 1149:tid 139877010040576] [client 20.48.250.41:43752] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wps.php"] [unique_id "api6Yu5-Dlx-kBq1C1ACkwAAAZU"]
[Wed Sep 02 19:08:04.058515 2026] [:error] [pid 1149:tid 139877127538432] [client 20.48.250.41:43798] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "api6ZO5-Dlx-kBq1C1ACowAAAYc"]
[Wed Sep 02 19:08:05.275625 2026] [:error] [pid 1072:tid 139877093967616] [client 20.48.250.41:43918] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/black.php"] [unique_id "api6ZVSr6Dum30GCXcS3OwAAAQs"]
[Wed Sep 02 19:08:06.490211 2026] [:error] [pid 1149:tid 139877026825984] [client 20.48.250.41:43780] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a5e0a.php"] [unique_id "api6Zu5-Dlx-kBq1C1ACtwAAAZM"]
[Wed Sep 02 19:08:07.692150 2026] [:error] [pid 1149:tid 139877248907008] [client 20.48.250.41:43904] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/book.php"] [unique_id "api6Z-5-Dlx-kBq1C1ACvQAAAYE"]
[Wed Sep 02 19:08:08.898446 2026] [:error] [pid 1073:tid 139877127538432] [client 20.48.250.41:43815] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/fucku.php"] [unique_id "api6aFaa_Qo7NvRGH-C2QwAAAUc"]
[Wed Sep 02 19:08:10.143683 2026] [:error] [pid 1024:tid 139877240514304] [client 20.48.250.41:43900] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/lv.php"] [unique_id "api6aqwUOJ55hWVbhHkq_wAAAMI"]
[Wed Sep 02 19:08:11.358730 2026] [:error] [pid 1024:tid 139877135931136] [client 20.48.250.41:43876] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jcibmxqm.php"] [unique_id "api6a6wUOJ55hWVbhHkrBgAAAMY"]
[Wed Sep 02 19:08:12.578667 2026] [:error] [pid 1149:tid 139877110753024] [client 20.48.250.41:43762] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/files/css_compare.php"] [unique_id "api6bO5-Dlx-kBq1C1AC5wAAAYk"]
[Wed Sep 02 19:08:13.797591 2026] [:error] [pid 1149:tid 139877135931136] [client 20.48.250.41:43973] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xwpg.php"] [unique_id "api6be5-Dlx-kBq1C1AC9wAAAYY"]
[Wed Sep 02 19:08:15.013736 2026] [:error] [pid 902:tid 139877018433280] [client 20.48.250.41:43793] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/niett.php"] [unique_id "api6b3D3UfRyd6VRADI9iAAAABQ"]
[Wed Sep 02 19:08:16.264298 2026] [:error] [pid 1149:tid 139877043611392] [client 20.48.250.41:43872] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sc.php"] [unique_id "api6cO5-Dlx-kBq1C1ADDwAAAZE"]
[Wed Sep 02 19:08:17.482700 2026] [:error] [pid 903:tid 139877248907008] [client 20.48.250.41:43914] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "api6ca_SfnohFj1ZkMFGGAAAAEE"]
[Wed Sep 02 19:08:18.730793 2026] [:error] [pid 903:tid 139877102360320] [client 20.48.250.41:44018] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/bbn.php"] [unique_id "api6cq_SfnohFj1ZkMFGJwAAAEo"]
[Wed Sep 02 19:08:19.950449 2026] [:error] [pid 903:tid 139877018433280] [client 20.48.250.41:43746] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/info.php.backup"] [unique_id "api6c6_SfnohFj1ZkMFGMAAAAFQ"]
[Wed Sep 02 19:08:21.177085 2026] [:error] [pid 904:tid 139877060396800] [client 20.48.250.41:43726] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/farah.php"] [unique_id "api6dQ1jFUZnIigSyINMtQAAAI8"]
[Wed Sep 02 19:08:22.381926 2026] [:error] [pid 903:tid 139877110753024] [client 20.48.250.41:43865] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/rh1.php"] [unique_id "api6dq_SfnohFj1ZkMFGPgAAAEk"]
[Wed Sep 02 19:08:23.612241 2026] [:error] [pid 903:tid 139877018433280] [client 20.48.250.41:43994] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/rk2.php"] [unique_id "api6d6_SfnohFj1ZkMFGSwAAAFQ"]
[Wed Sep 02 19:08:24.815159 2026] [:error] [pid 903:tid 139877240514304] [client 20.48.250.41:43875] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a4.php"] [unique_id "api6eK_SfnohFj1ZkMFGUQAAAEI"]
[Wed Sep 02 19:08:26.031000 2026] [:error] [pid 1073:tid 139877127538432] [client 20.48.250.41:43977] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin/function.php"] [unique_id "api6elaa_Qo7NvRGH-C2cgAAAUc"]
[Wed Sep 02 19:08:27.249394 2026] [:error] [pid 1073:tid 139877127538432] [client 20.48.250.41:43916] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/edit.php"] [unique_id "api6e1aa_Qo7NvRGH-C2dwAAAUc"]
[Wed Sep 02 19:08:28.466704 2026] [:error] [pid 1024:tid 139877110753024] [client 20.48.250.41:43735] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/index.php"] [unique_id "api6fKwUOJ55hWVbhHkrLgAAAMk"]
[Wed Sep 02 19:08:29.702097 2026] [:error] [pid 902:tid 139876993255168] [client 20.48.250.41:43910] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "api6fXD3UfRyd6VRADI9mgAAABc"]
[Wed Sep 02 19:08:30.917097 2026] [:error] [pid 904:tid 139877043611392] [client 20.48.250.41:44008] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aaa.php"] [unique_id "api6fg1jFUZnIigSyINM8AAAAJE"]
[Wed Sep 02 19:08:32.136404 2026] [:error] [pid 903:tid 139877135931136] [client 20.48.250.41:43886] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jjrpo.php"] [unique_id "api6gK_SfnohFj1ZkMFGegAAAEY"]
[Wed Sep 02 19:08:33.351876 2026] [:error] [pid 903:tid 139877043611392] [client 20.48.250.41:44024] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mail.php"] [unique_id "api6ga_SfnohFj1ZkMFGewAAAFE"]
[Wed Sep 02 19:08:34.568912 2026] [:error] [pid 1149:tid 139877085574912] [client 20.48.250.41:44012] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws77.php"] [unique_id "api6gu5-Dlx-kBq1C1ADnQAAAYw"]
[Wed Sep 02 19:08:35.816556 2026] [:error] [pid 1073:tid 139877060396800] [client 20.48.250.41:43748] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/kj.php"] [unique_id "api6g1aa_Qo7NvRGH-C2hwAAAU8"]
[Wed Sep 02 19:08:37.035846 2026] [:error] [pid 1150:tid 139877010040576] [client 20.48.250.41:43912] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/yas.php"] [unique_id "api6hVandIN96G83sQa8_gAAAdU"]
[Wed Sep 02 19:08:38.254553 2026] [:error] [pid 1150:tid 139877043611392] [client 20.48.250.41:43787] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/w.php"] [unique_id "api6hlandIN96G83sQa8_wAAAdE"]
[Wed Sep 02 19:08:39.468879 2026] [:error] [pid 1024:tid 139877093967616] [client 20.48.250.41:44003] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aboutc.php"] [unique_id "api6h6wUOJ55hWVbhHkrPQAAAMs"]
[Wed Sep 02 19:08:40.781029 2026] [:error] [pid 1149:tid 139877052004096] [client 20.48.250.41:43925] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/whm-cp.php"] [unique_id "api6iO5-Dlx-kBq1C1ADoAAAAZA"]
[Wed Sep 02 19:08:41.982321 2026] [:error] [pid 1149:tid 139877010040576] [client 20.48.250.41:43965] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wen.php"] [unique_id "api6ie5-Dlx-kBq1C1ADowAAAZU"]
[Wed Sep 02 19:08:43.207560 2026] [:error] [pid 1149:tid 139877026825984] [client 20.48.250.41:44002] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/55.php"] [unique_id "api6i-5-Dlx-kBq1C1ADpwAAAZM"]
[Wed Sep 02 19:08:44.485607 2026] [:error] [pid 1073:tid 139877248907008] [client 20.48.250.41:43877] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/leaf.php"] [unique_id "api6jFaa_Qo7NvRGH-C2jAAAAUE"]
[Wed Sep 02 19:08:45.789090 2026] [:error] [pid 1149:tid 139877119145728] [client 20.48.250.41:43936] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/edaewni/index.php"] [unique_id "api6je5-Dlx-kBq1C1ADqQAAAYg"]
[Wed Sep 02 19:08:47.008110 2026] [:error] [pid 903:tid 139877018433280] [client 20.48.250.41:43919] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/en0.php"] [unique_id "api6j6_SfnohFj1ZkMFGggAAAFQ"]
[Wed Sep 02 19:08:48.252042 2026] [:error] [pid 903:tid 139877010040576] [client 20.48.250.41:43903] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/readme.php"] [unique_id "api6kK_SfnohFj1ZkMFGhAAAAFU"]
[Wed Sep 02 19:08:49.473934 2026] [:error] [pid 903:tid 139876984862464] [client 20.48.250.41:43907] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-2019.php"] [unique_id "api6ka_SfnohFj1ZkMFGhwAAAFg"]
[Wed Sep 02 19:08:50.699749 2026] [:error] [pid 1024:tid 139877127538432] [client 20.48.250.41:43894] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fm.php"] [unique_id "api6kqwUOJ55hWVbhHkrQwAAAMc"]
[Wed Sep 02 19:08:51.989235 2026] [:error] [pid 1149:tid 139877085574912] [client 20.48.250.41:43713] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nonesoterically.php"] [unique_id "api6k-5-Dlx-kBq1C1ADsQAAAYw"]
[Wed Sep 02 19:08:53.223382 2026] [:error] [pid 1149:tid 139877257299712] [client 20.48.250.41:43934] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ccea.php"] [unique_id "api6le5-Dlx-kBq1C1ADuQAAAYA"]
[Wed Sep 02 19:08:54.441012 2026] [:error] [pid 1149:tid 139877068789504] [client 20.48.250.41:44014] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/min.php"] [unique_id "api6lu5-Dlx-kBq1C1ADvgAAAY4"]
[Wed Sep 02 19:08:55.680257 2026] [:error] [pid 1149:tid 139877135931136] [client 20.48.250.41:43889] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/disquiet.php"] [unique_id "api6l-5-Dlx-kBq1C1ADwAAAAYY"]
[Wed Sep 02 19:08:56.922411 2026] [:error] [pid 1150:tid 139877068789504] [client 20.48.250.41:43920] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php_info.php.old"] [unique_id "api6mFandIN96G83sQa9DAAAAc4"]
[Wed Sep 02 19:08:58.139599 2026] [:error] [pid 904:tid 139877152716544] [client 20.48.250.41:43999] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/07.php"] [unique_id "api6mg1jFUZnIigSyINNBwAAAIQ"]
[Wed Sep 02 19:08:59.357061 2026] [:error] [pid 903:tid 139877043611392] [client 20.48.250.41:43970] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ifm.php"] [unique_id "api6m6_SfnohFj1ZkMFGmwAAAFE"]
[Wed Sep 02 19:09:00.575584 2026] [:error] [pid 1073:tid 139877018433280] [client 20.48.250.41:43813] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/radio.php"] [unique_id "api6nFaa_Qo7NvRGH-C2kAAAAVQ"]
[Wed Sep 02 19:09:01.791690 2026] [:error] [pid 1149:tid 139877144323840] [client 20.48.250.41:44020] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/plugins.php"] [unique_id "api6ne5-Dlx-kBq1C1AD0wAAAYU"]
[Wed Sep 02 19:09:03.009898 2026] [:error] [pid 903:tid 139876993255168] [client 20.48.250.41:43666] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gdn.php"] [unique_id "api6n6_SfnohFj1ZkMFGnQAAAFc"]
[Wed Sep 02 19:09:04.259428 2026] [:error] [pid 1149:tid 139877060396800] [client 20.48.250.41:43806] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-poose.php"] [unique_id "api6oO5-Dlx-kBq1C1AD2gAAAY8"]
[Wed Sep 02 19:09:05.481981 2026] [:error] [pid 903:tid 139877152716544] [client 20.48.250.41:43902] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/asax.php"] [unique_id "api6oa_SfnohFj1ZkMFGoAAAAEQ"]
[Wed Sep 02 19:09:06.697083 2026] [:error] [pid 904:tid 139877240514304] [client 20.48.250.41:43823] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jmealhny.php"] [unique_id "api6og1jFUZnIigSyINNEQAAAII"]
[Wed Sep 02 19:09:07.936957 2026] [:error] [pid 1072:tid 139877119145728] [client 20.48.250.41:43983] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/c.php"] [unique_id "api6o1Sr6Dum30GCXcS3lgAAAQg"]
[Wed Sep 02 19:09:11.987372 2026] [proxy_fcgi:error] [pid 1149:tid 139877093967616] [client 20.48.250.41:43893] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:13.230626 2026] [proxy_fcgi:error] [pid 1150:tid 139877085574912] [client 20.48.250.41:43873] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:14.464491 2026] [proxy_fcgi:error] [pid 902:tid 139877001647872] [client 20.48.250.41:43847] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:15.771165 2026] [proxy_fcgi:error] [pid 1150:tid 139877232121600] [client 20.48.250.41:43871] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:18.221035 2026] [proxy_fcgi:error] [pid 1150:tid 139877035218688] [client 20.48.250.41:43984] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:19.456567 2026] [proxy_fcgi:error] [pid 1149:tid 139877043611392] [client 20.48.250.41:43962] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:20.670200 2026] [proxy_fcgi:error] [pid 1150:tid 139877144323840] [client 20.48.250.41:43716] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:21.892028 2026] [proxy_fcgi:error] [pid 1149:tid 139877085574912] [client 20.48.250.41:43727] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:23.110754 2026] [proxy_fcgi:error] [pid 903:tid 139877077182208] [client 20.48.250.41:43921] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:24.326315 2026] [proxy_fcgi:error] [pid 904:tid 139877052004096] [client 20.48.250.41:44017] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:25.562603 2026] [proxy_fcgi:error] [pid 1149:tid 139877135931136] [client 20.48.250.41:43851] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:28.038442 2026] [proxy_fcgi:error] [pid 1073:tid 139877127538432] [client 20.48.250.41:43968] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:29.296768 2026] [proxy_fcgi:error] [pid 1149:tid 139876984862464] [client 20.48.250.41:44015] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:30.564566 2026] [proxy_fcgi:error] [pid 1149:tid 139877052004096] [client 20.48.250.41:44000] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:31.784603 2026] [proxy_fcgi:error] [pid 1149:tid 139877026825984] [client 20.48.250.41:43845] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:33.003936 2026] [proxy_fcgi:error] [pid 1149:tid 139877110753024] [client 20.48.250.41:43931] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:34.268451 2026] [proxy_fcgi:error] [pid 1150:tid 139877085574912] [client 20.48.250.41:43846] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:35.485974 2026] [proxy_fcgi:error] [pid 1149:tid 139877010040576] [client 20.48.250.41:43963] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:36.718117 2026] [proxy_fcgi:error] [pid 1149:tid 139877060396800] [client 20.48.250.41:43858] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:37.974169 2026] [proxy_fcgi:error] [pid 904:tid 139877077182208] [client 20.48.250.41:43851] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:40.435239 2026] [proxy_fcgi:error] [pid 903:tid 139877010040576] [client 20.48.250.41:43822] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:41.689782 2026] [proxy_fcgi:error] [pid 903:tid 139877240514304] [client 20.48.250.41:43993] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:09:41.690172 2026] [:error] [pid 903:tid 139877240514304] [client 20.48.250.41:43993] [client 20.48.250.41] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/kzkwq.php"] [unique_id "api6xa_SfnohFj1ZkMFGxQAAAEI"]
[Wed Sep 02 19:09:42.910315 2026] [:error] [pid 1072:tid 139877077182208] [client 20.48.250.41:43938] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zfile.php"] [unique_id "api6xlSr6Dum30GCXcS3oAAAAQ0"]
[Wed Sep 02 19:09:44.127958 2026] [:error] [pid 1024:tid 139877232121600] [client 20.48.250.41:43909] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/green.php"] [unique_id "api6yKwUOJ55hWVbhHkrVAAAAMM"]
[Wed Sep 02 19:09:45.331806 2026] [:error] [pid 903:tid 139876984862464] [client 20.48.250.41:43908] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/class.php"] [unique_id "api6ya_SfnohFj1ZkMFGzwAAAFg"]
[Wed Sep 02 19:09:46.576580 2026] [:error] [pid 1149:tid 139877018433280] [client 20.48.250.41:44016] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/5b9ac.php"] [unique_id "api6yu5-Dlx-kBq1C1AEHQAAAZQ"]
[Wed Sep 02 19:09:47.814715 2026] [:error] [pid 1149:tid 139877248907008] [client 20.48.250.41:43974] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/rz.php"] [unique_id "api6y-5-Dlx-kBq1C1AEIAAAAYE"]
[Wed Sep 02 19:09:49.039444 2026] [:error] [pid 1149:tid 139877152716544] [client 20.48.250.41:43959] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wsop.php"] [unique_id "api6ze5-Dlx-kBq1C1AEIgAAAYQ"]
[Wed Sep 02 19:09:50.245178 2026] [:error] [pid 903:tid 139877035218688] [client 20.48.250.41:43941] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php_info.php.tmp"] [unique_id "api6zq_SfnohFj1ZkMFG0wAAAFI"]
[Wed Sep 02 19:09:51.460503 2026] [:error] [pid 1149:tid 139877018433280] [client 20.48.250.41:43724] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/jbdah.php"] [unique_id "api6z-5-Dlx-kBq1C1AEJgAAAZQ"]
[Wed Sep 02 19:09:52.679145 2026] [:error] [pid 1024:tid 139877119145728] [client 20.48.250.41:43989] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "api60KwUOJ55hWVbhHkrWAAAAMg"]
[Wed Sep 02 19:09:53.928883 2026] [:error] [pid 1073:tid 139877018433280] [client 20.48.250.41:43827] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-blog.php"] [unique_id "api60Vaa_Qo7NvRGH-C2qAAAAVQ"]
[Wed Sep 02 19:09:55.149413 2026] [:error] [pid 1024:tid 139877240514304] [client 20.48.250.41:43882] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/144.php"] [unique_id "api606wUOJ55hWVbhHkrWQAAAMI"]
[Wed Sep 02 19:09:56.395459 2026] [:error] [pid 1024:tid 139877068789504] [client 20.48.250.41:43677] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/php_version.php"] [unique_id "api61KwUOJ55hWVbhHkrXAAAAM4"]
[Wed Sep 02 19:09:57.611735 2026] [:error] [pid 1073:tid 139876984862464] [client 20.48.250.41:43802] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/a.php"] [unique_id "api61Vaa_Qo7NvRGH-C2qgAAAVg"]
[Wed Sep 02 19:09:58.857312 2026] [:error] [pid 1149:tid 139877060396800] [client 20.48.250.41:43982] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aGeTbFjB5Zu.php"] [unique_id "api61u5-Dlx-kBq1C1AEKgAAAY8"]
[Wed Sep 02 19:10:00.062208 2026] [:error] [pid 1149:tid 139877144323840] [client 20.48.250.41:43953] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/06.php"] [unique_id "api62O5-Dlx-kBq1C1AELAAAAYU"]
[Wed Sep 02 19:10:01.279711 2026] [:error] [pid 903:tid 139877077182208] [client 20.48.250.41:43730] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/7.php"] [unique_id "api62a_SfnohFj1ZkMFG2wAAAE0"]
[Wed Sep 02 19:10:02.482621 2026] [:error] [pid 1024:tid 139877232121600] [client 20.48.250.41:43868] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/admin1.php"] [unique_id "api62qwUOJ55hWVbhHkrXgAAAMM"]
[Wed Sep 02 19:10:03.697240 2026] [:error] [pid 1149:tid 139876984862464] [client 20.48.250.41:43992] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fi22.php"] [unique_id "api62-5-Dlx-kBq1C1AELQAAAZg"]
[Wed Sep 02 19:10:04.932569 2026] [:error] [pid 1073:tid 139877052004096] [client 20.48.250.41:43738] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/adminfuns.php"] [unique_id "api63Faa_Qo7NvRGH-C2rAAAAVA"]
[Wed Sep 02 19:10:06.187451 2026] [:error] [pid 903:tid 139877001647872] [client 20.48.250.41:43917] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mudxizxnc.php"] [unique_id "api63q_SfnohFj1ZkMFG5gAAAFY"]
[Wed Sep 02 19:10:07.413844 2026] [:error] [pid 902:tid 139877119145728] [client 20.48.250.41:43923] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/100.php"] [unique_id "api633D3UfRyd6VRADI9vwAAAAg"]
[Wed Sep 02 19:10:08.630946 2026] [:error] [pid 1149:tid 139877093967616] [client 20.48.250.41:43796] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "api64O5-Dlx-kBq1C1AEMgAAAYs"]
[Wed Sep 02 19:10:09.869437 2026] [:error] [pid 903:tid 139877026825984] [client 20.48.250.41:44029] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gl.php"] [unique_id "api64a_SfnohFj1ZkMFG6wAAAFM"]
[Wed Sep 02 19:10:11.121338 2026] [:error] [pid 1072:tid 139877152716544] [client 20.48.250.41:43722] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/f35.php"] [unique_id "api641Sr6Dum30GCXcS3rQAAAQQ"]
[Wed Sep 02 19:10:12.360286 2026] [:error] [pid 1072:tid 139877010040576] [client 20.48.250.41:44006] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/w3llscc.php"] [unique_id "api65FSr6Dum30GCXcS3rgAAARU"]
[Wed Sep 02 19:10:13.567234 2026] [:error] [pid 902:tid 139877035218688] [client 20.48.250.41:43915] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fc72f.php"] [unique_id "api65XD3UfRyd6VRADI9wAAAABI"]
[Wed Sep 02 19:10:14.802587 2026] [:error] [pid 1150:tid 139877152716544] [client 20.48.250.41:43991] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/momo.php"] [unique_id "api65landIN96G83sQa9IAAAAcQ"]
[Wed Sep 02 19:10:16.028900 2026] [:error] [pid 1150:tid 139876993255168] [client 20.48.250.41:43786] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wkwk.php"] [unique_id "api66FandIN96G83sQa9IQAAAdc"]
[Wed Sep 02 19:10:17.262294 2026] [:error] [pid 1149:tid 139877035218688] [client 20.48.250.41:43976] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/seetox.php"] [unique_id "api66e5-Dlx-kBq1C1AEQQAAAZI"]
[Wed Sep 02 19:10:18.467274 2026] [:error] [pid 1150:tid 139877152716544] [client 20.48.250.41:43995] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/za2.php"] [unique_id "api66landIN96G83sQa9IgAAAcQ"]
[Wed Sep 02 19:10:19.691573 2026] [:error] [pid 904:tid 139877026825984] [client 20.48.250.41:43896] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-blogs.php"] [unique_id "api66w1jFUZnIigSyINNOwAAAJM"]
[Wed Sep 02 19:10:20.900688 2026] [:error] [pid 903:tid 139877110753024] [client 20.48.250.41:43926] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public/vx.php"] [unique_id "api67K_SfnohFj1ZkMFG-gAAAEk"]
[Wed Sep 02 19:10:22.146577 2026] [:error] [pid 1149:tid 139877240514304] [client 20.48.250.41:44022] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws60.php"] [unique_id "api67u5-Dlx-kBq1C1AEVAAAAYI"]
[Wed Sep 02 19:10:23.368409 2026] [:error] [pid 1149:tid 139877060396800] [client 20.48.250.41:43862] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/aghbvr.php"] [unique_id "api67-5-Dlx-kBq1C1AEaAAAAY8"]
[Wed Sep 02 19:10:24.579820 2026] [:error] [pid 904:tid 139877035218688] [client 20.48.250.41:44009] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gettest.php"] [unique_id "api68A1jFUZnIigSyINNUgAAAJI"]
[Wed Sep 02 19:10:25.785009 2026] [:error] [pid 903:tid 139877018433280] [client 20.48.250.41:43682] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/qa.php"] [unique_id "api68a_SfnohFj1ZkMFHPQAAAFQ"]
[Wed Sep 02 19:10:27.032165 2026] [:error] [pid 1024:tid 139876993255168] [client 20.48.250.41:43781] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/diagnostic.php"] [unique_id "api686wUOJ55hWVbhHkrcgAAANc"]
[Wed Sep 02 19:10:28.250076 2026] [:error] [pid 1073:tid 139877110753024] [client 20.48.250.41:43856] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/404.php"] [unique_id "api69Faa_Qo7NvRGH-C22AAAAUk"]
[Wed Sep 02 19:10:29.482796 2026] [:error] [pid 902:tid 139877068789504] [client 20.48.250.41:43826] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xopvne.php"] [unique_id "api69XD3UfRyd6VRADI95AAAAA4"]
[Wed Sep 02 19:10:30.721685 2026] [:error] [pid 1073:tid 139877068789504] [client 20.48.250.41:43932] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/apk.php"] [unique_id "api69laa_Qo7NvRGH-C26gAAAU4"]
[Wed Sep 02 19:10:31.941404 2026] [:error] [pid 1072:tid 139877232121600] [client 20.48.250.41:44027] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/un.php"] [unique_id "api691Sr6Dum30GCXcS33gAAAQM"]
[Wed Sep 02 19:10:33.206206 2026] [:error] [pid 1024:tid 139876993255168] [client 20.48.250.41:43772] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/0.php"] [unique_id "api6-awUOJ55hWVbhHkrkAAAANc"]
[Wed Sep 02 19:10:34.434705 2026] [:error] [pid 1150:tid 139877093967616] [client 20.48.250.41:43942] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/Angelv2.php"] [unique_id "api6-landIN96G83sQa9ZgAAAcs"]
[Wed Sep 02 19:10:35.668216 2026] [:error] [pid 1072:tid 139877026825984] [client 20.48.250.41:43971] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-blog-front.php"] [unique_id "api6-1Sr6Dum30GCXcS3_AAAARM"]
[Wed Sep 02 19:10:36.886932 2026] [:error] [pid 1073:tid 139877110753024] [client 20.48.250.41:43972] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/index.php"] [unique_id "api6_Faa_Qo7NvRGH-C3GgAAAUk"]
[Wed Sep 02 19:10:38.117874 2026] [:error] [pid 904:tid 139877035218688] [client 20.48.250.41:43855] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fot.php"] [unique_id "api6_g1jFUZnIigSyINOHQAAAJI"]
[Wed Sep 02 19:10:39.330927 2026] [:error] [pid 903:tid 139876984862464] [client 20.48.250.41:43805] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/fns.php"] [unique_id "api6_6_SfnohFj1ZkMFIWwAAAFg"]
[Wed Sep 02 19:10:40.551497 2026] [:error] [pid 903:tid 139877068789504] [client 20.48.250.41:43840] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/X57.php"] [unique_id "api7AK_SfnohFj1ZkMFIhQAAAE4"]
[Wed Sep 02 19:10:41.803268 2026] [:error] [pid 904:tid 139877232121600] [client 20.48.250.41:44010] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ws75.php"] [unique_id "api7AQ1jFUZnIigSyINOQAAAAIM"]
[Wed Sep 02 19:10:43.047199 2026] [:error] [pid 902:tid 139877110753024] [client 20.48.250.41:43979] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/ajax.php"] [unique_id "api7A3D3UfRyd6VRADI-PwAAAAk"]
[Wed Sep 02 19:10:44.301934 2026] [:error] [pid 1024:tid 139877232121600] [client 20.48.250.41:43948] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/xxw.php"] [unique_id "api7BKwUOJ55hWVbhHkscAAAAMM"]
[Wed Sep 02 19:10:45.528882 2026] [:error] [pid 1073:tid 139876984862464] [client 20.48.250.41:43988] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/666.php"] [unique_id "api7BVaa_Qo7NvRGH-C3XAAAAVg"]
[Wed Sep 02 19:10:46.746842 2026] [:error] [pid 1150:tid 139877035218688] [client 20.48.250.41:43756] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/about.php"] [unique_id "api7BlandIN96G83sQa9zQAAAdI"]
[Wed Sep 02 19:10:48.034215 2026] [:error] [pid 1024:tid 139877102360320] [client 20.48.250.41:43843] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/met2.php"] [unique_id "api7CKwUOJ55hWVbhHkswwAAAMo"]
[Wed Sep 02 19:28:13.544263 2026] [proxy_fcgi:error] [pid 1150:tid 139877119145728] [client 134.199.239.40:40074] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 19:49:49.820282 2026] [:error] [pid 1150:tid 139877110753024] [client 110.42.208.131:53506] [client 110.42.208.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apjELVandIN96G83sQbnIgAAAck"]
[Wed Sep 02 20:55:53.693125 2026] [proxy_fcgi:error] [pid 903:tid 139877001647872] [client 87.106.32.238:53900] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 21:02:15.935439 2026] [proxy_fcgi:error] [pid 1149:tid 139877144323840] [client 164.92.85.4:55644] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 21:42:24.111751 2026] [:error] [pid 903:tid 139877001647872] [client 43.130.131.18:49556] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apjekK_SfnohFj1ZkMGd5AAAAFY"]
[Wed Sep 02 21:48:45.546730 2026] [proxy_fcgi:error] [pid 1073:tid 139877257299712] [client 142.93.195.73:42890] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:32:22.551816 2026] [:error] [pid 1149:tid 139877119145728] [client 49.51.39.209:34538] [client 49.51.39.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apjqRu5-Dlx-kBq1C1BstAAAAYg"]
[Wed Sep 02 22:53:18.602845 2026] [:error] [pid 1073:tid 139877144323840] [client 34.50.110.253:50184] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "apjvLlaa_Qo7NvRGH-AbEgAAAUU"]
[Wed Sep 02 22:53:20.388311 2026] [:error] [pid 1150:tid 139877152716544] [client 34.50.110.253:50192] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "apjvMFandIN96G83sQYu-AAAAcQ"]
[Wed Sep 02 22:53:21.266194 2026] [:error] [pid 1150:tid 139877257299712] [client 34.50.110.253:50206] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.local"] [unique_id "apjvMVandIN96G83sQYu-QAAAcA"]
[Wed Sep 02 22:53:22.088901 2026] [:error] [pid 1150:tid 139877102360320] [client 34.50.110.253:50208] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.production"] [unique_id "apjvMlandIN96G83sQYu-gAAAco"]
[Wed Sep 02 22:53:23.014031 2026] [:error] [pid 1072:tid 139877135931136] [client 34.50.110.253:50216] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.staging"] [unique_id "apjvM1Sr6Dum30GCXcQMnwAAAQY"]
[Wed Sep 02 22:53:23.867532 2026] [:error] [pid 1150:tid 139877068789504] [client 34.50.110.253:50226] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.development"] [unique_id "apjvM1andIN96G83sQYu_AAAAc4"]
[Wed Sep 02 22:53:24.684521 2026] [:error] [pid 1073:tid 139877110753024] [client 34.50.110.253:50238] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.test"] [unique_id "apjvNFaa_Qo7NvRGH-AbFgAAAUk"]
[Wed Sep 02 22:53:25.599803 2026] [:error] [pid 1073:tid 139877248907008] [client 34.50.110.253:50250] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.remote"] [unique_id "apjvNVaa_Qo7NvRGH-AbFwAAAUE"]
[Wed Sep 02 22:53:26.631813 2026] [:error] [pid 903:tid 139877093967616] [client 34.50.110.253:50264] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.bak"] [unique_id "apjvNq_SfnohFj1ZkMGsnQAAAEs"]
[Wed Sep 02 22:53:27.563150 2026] [:error] [pid 1150:tid 139877240514304] [client 34.50.110.253:50270] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.backup"] [unique_id "apjvN1andIN96G83sQYu_wAAAcI"]
[Wed Sep 02 22:53:28.426016 2026] [:error] [pid 1149:tid 139877257299712] [client 34.50.110.253:50280] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.save"] [unique_id "apjvOO5-Dlx-kBq1C1BuXwAAAYA"]
[Wed Sep 02 22:53:29.269294 2026] [:error] [pid 1150:tid 139877085574912] [client 34.50.110.253:37108] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.old"] [unique_id "apjvOVandIN96G83sQYvAAAAAcw"]
[Wed Sep 02 22:53:30.125931 2026] [:error] [pid 903:tid 139876984862464] [client 34.50.110.253:37118] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.sample"] [unique_id "apjvOq_SfnohFj1ZkMGsoAAAAFg"]
[Wed Sep 02 22:53:31.085766 2026] [:error] [pid 1150:tid 139877010040576] [client 34.50.110.253:37122] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.example"] [unique_id "apjvO1andIN96G83sQYvAQAAAdU"]
[Wed Sep 02 22:53:32.055391 2026] [:error] [pid 1150:tid 139877135931136] [client 34.50.110.253:37132] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.dev"] [unique_id "apjvPFandIN96G83sQYvAwAAAcY"]
[Wed Sep 02 22:53:32.999807 2026] [:error] [pid 1149:tid 139877119145728] [client 34.50.110.253:37142] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.prod"] [unique_id "apjvPO5-Dlx-kBq1C1BuYAAAAYg"]
[Wed Sep 02 22:53:33.830057 2026] [:error] [pid 903:tid 139877110753024] [client 34.50.110.253:37144] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.stage"] [unique_id "apjvPa_SfnohFj1ZkMGsoQAAAEk"]
[Wed Sep 02 22:53:34.580680 2026] [:error] [pid 1073:tid 139877001647872] [client 34.50.110.253:37156] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.ci"] [unique_id "apjvPlaa_Qo7NvRGH-AbGgAAAVY"]
[Wed Sep 02 22:53:35.522293 2026] [:error] [pid 1073:tid 139877102360320] [client 34.50.110.253:37160] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.docker"] [unique_id "apjvP1aa_Qo7NvRGH-AbHQAAAUo"]
[Wed Sep 02 22:53:36.340378 2026] [:error] [pid 903:tid 139877119145728] [client 34.50.110.253:37174] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.live"] [unique_id "apjvQK_SfnohFj1ZkMGsowAAAEg"]
[Wed Sep 02 22:53:37.189805 2026] [:error] [pid 1073:tid 139877043611392] [client 34.50.110.253:37180] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.preprod"] [unique_id "apjvQVaa_Qo7NvRGH-AbIAAAAVE"]
[Wed Sep 02 22:53:38.085440 2026] [:error] [pid 903:tid 139877085574912] [client 34.50.110.253:37186] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.uat"] [unique_id "apjvQq_SfnohFj1ZkMGspAAAAEw"]
[Wed Sep 02 22:53:38.925907 2026] [:error] [pid 904:tid 139877052004096] [client 34.50.110.253:45806] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.dist"] [unique_id "apjvQg1jFUZnIigSyIOygQAAAJA"]
[Wed Sep 02 22:53:39.830417 2026] [:error] [pid 1149:tid 139877144323840] [client 34.50.110.253:45814] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.swp"] [unique_id "apjvQ-5-Dlx-kBq1C1BuYgAAAYU"]
[Wed Sep 02 22:53:40.671552 2026] [:error] [pid 1024:tid 139877257299712] [client 34.50.110.253:45826] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env~"] [unique_id "apjvRKwUOJ55hWVbhHmUVQAAAMA"]
[Wed Sep 02 22:53:41.482435 2026] [:error] [pid 1149:tid 139877026825984] [client 34.50.110.253:45838] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env1"] [unique_id "apjvRe5-Dlx-kBq1C1BuZAAAAZM"]
[Wed Sep 02 22:53:42.334784 2026] [:error] [pid 1149:tid 139877077182208] [client 34.50.110.253:45854] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env2"] [unique_id "apjvRu5-Dlx-kBq1C1BuZQAAAY0"]
[Wed Sep 02 22:53:43.150128 2026] [:error] [pid 1149:tid 139877102360320] [client 34.50.110.253:45862] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env_copy"] [unique_id "apjvR-5-Dlx-kBq1C1BuZgAAAYo"]
[Wed Sep 02 22:53:43.999992 2026] [:error] [pid 1072:tid 139877248907008] [client 34.50.110.253:45870] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.txt"] [unique_id "apjvR1Sr6Dum30GCXcQMpgAAAQE"]
[Wed Sep 02 22:53:44.831879 2026] [:error] [pid 1073:tid 139877152716544] [client 34.50.110.253:45886] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.json"] [unique_id "apjvSFaa_Qo7NvRGH-AbJQAAAUQ"]
[Wed Sep 02 22:53:45.668774 2026] [:error] [pid 1149:tid 139877010040576] [client 34.50.110.253:45894] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.yaml"] [unique_id "apjvSe5-Dlx-kBq1C1BuZwAAAZU"]
[Wed Sep 02 22:53:46.475733 2026] [:error] [pid 902:tid 139877093967616] [client 34.50.110.253:45904] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.yml"] [unique_id "apjvSnD3UfRyd6VRADKdwgAAAAs"]
[Wed Sep 02 22:53:47.428769 2026] [:error] [pid 1024:tid 139877085574912] [client 34.50.110.253:45914] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/app/.env"] [unique_id "apjvS6wUOJ55hWVbhHmUWgAAAMw"]
[Wed Sep 02 22:53:48.278203 2026] [:error] [pid 1073:tid 139877127538432] [client 34.50.110.253:45928] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/apps/.env"] [unique_id "apjvTFaa_Qo7NvRGH-AbJwAAAUc"]
[Wed Sep 02 22:53:49.121589 2026] [:error] [pid 1073:tid 139877018433280] [client 34.50.110.253:36068] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/.env"] [unique_id "apjvTVaa_Qo7NvRGH-AbKQAAAVQ"]
[Wed Sep 02 22:53:49.970753 2026] [:error] [pid 1024:tid 139877152716544] [client 34.50.110.253:36080] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/web/.env"] [unique_id "apjvTawUOJ55hWVbhHmUWwAAAMQ"]
[Wed Sep 02 22:53:50.784758 2026] [:error] [pid 1073:tid 139877240514304] [client 34.50.110.253:36086] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/site/.env"] [unique_id "apjvTlaa_Qo7NvRGH-AbKgAAAUI"]
[Wed Sep 02 22:53:51.623287 2026] [:error] [pid 1073:tid 139877119145728] [client 34.50.110.253:36092] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/public/.env"] [unique_id "apjvT1aa_Qo7NvRGH-AbLAAAAUg"]
[Wed Sep 02 22:53:52.529267 2026] [:error] [pid 902:tid 139877257299712] [client 34.50.110.253:36096] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/admin/.env"] [unique_id "apjvUHD3UfRyd6VRADKdxQAAAAA"]
[Wed Sep 02 22:53:53.401168 2026] [:error] [pid 902:tid 139877001647872] [client 34.50.110.253:36110] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/backend/.env"] [unique_id "apjvUXD3UfRyd6VRADKdxgAAABY"]
[Wed Sep 02 22:53:54.283922 2026] [:error] [pid 903:tid 139877152716544] [client 34.50.110.253:36114] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/server/.env"] [unique_id "apjvUq_SfnohFj1ZkMGspwAAAEQ"]
[Wed Sep 02 22:53:55.131842 2026] [:error] [pid 904:tid 139876984862464] [client 34.50.110.253:36126] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/frontend/.env"] [unique_id "apjvUw1jFUZnIigSyIOyhQAAAJg"]
[Wed Sep 02 22:53:55.936019 2026] [:error] [pid 1073:tid 139877052004096] [client 34.50.110.253:36142] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/src/.env"] [unique_id "apjvU1aa_Qo7NvRGH-AbMAAAAVA"]
[Wed Sep 02 22:53:56.915870 2026] [:error] [pid 1073:tid 139877152716544] [client 34.50.110.253:36146] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/core/.env"] [unique_id "apjvVFaa_Qo7NvRGH-AbMQAAAUQ"]
[Wed Sep 02 22:53:57.797427 2026] [:error] [pid 1073:tid 139877043611392] [client 34.50.110.253:36156] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/core/app/.env"] [unique_id "apjvVVaa_Qo7NvRGH-AbMgAAAVE"]
[Wed Sep 02 22:53:58.829533 2026] [:error] [pid 1072:tid 139876993255168] [client 34.50.110.253:44176] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/config/.env"] [unique_id "apjvVlSr6Dum30GCXcQMqQAAARc"]
[Wed Sep 02 22:53:59.728822 2026] [:error] [pid 1073:tid 139877127538432] [client 34.50.110.253:44188] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/private/.env"] [unique_id "apjvV1aa_Qo7NvRGH-AbNAAAAUc"]
[Wed Sep 02 22:54:00.678032 2026] [:error] [pid 1073:tid 139877102360320] [client 34.50.110.253:44200] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/application/.env"] [unique_id "apjvWFaa_Qo7NvRGH-AbNQAAAUo"]
[Wed Sep 02 22:54:01.501311 2026] [:error] [pid 1073:tid 139877018433280] [client 34.50.110.253:44202] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/bootstrap/.env"] [unique_id "apjvWVaa_Qo7NvRGH-AbNgAAAVQ"]
[Wed Sep 02 22:54:02.439104 2026] [:error] [pid 1149:tid 139877035218688] [client 34.50.110.253:44208] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/database/.env"] [unique_id "apjvWu5-Dlx-kBq1C1BubAAAAZI"]
[Wed Sep 02 22:54:03.507328 2026] [:error] [pid 1073:tid 139877144323840] [client 34.50.110.253:44224] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/storage/.env"] [unique_id "apjvW1aa_Qo7NvRGH-AbOAAAAUU"]
[Wed Sep 02 22:54:04.560168 2026] [:error] [pid 1150:tid 139877085574912] [client 34.50.110.253:44226] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/var/www/.env"] [unique_id "apjvXFandIN96G83sQYvDQAAAcw"]
[Wed Sep 02 22:54:05.446068 2026] [:error] [pid 1073:tid 139877026825984] [client 34.50.110.253:44236] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/var/www/html/.env"] [unique_id "apjvXVaa_Qo7NvRGH-AbOwAAAVM"]
[Wed Sep 02 22:54:06.408507 2026] [:error] [pid 1150:tid 139876993255168] [client 34.50.110.253:44238] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/current/.env"] [unique_id "apjvXlandIN96G83sQYvEwAAAdc"]
[Wed Sep 02 22:54:07.349967 2026] [:error] [pid 904:tid 139877127538432] [client 34.50.110.253:44254] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/release/.env"] [unique_id "apjvXw1jFUZnIigSyIOyjAAAAIc"]
[Wed Sep 02 22:54:08.289892 2026] [:error] [pid 1149:tid 139877093967616] [client 34.50.110.253:44258] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/releases/.env"] [unique_id "apjvYO5-Dlx-kBq1C1BubwAAAYs"]
[Wed Sep 02 22:54:09.222457 2026] [:error] [pid 1024:tid 139876984862464] [client 34.50.110.253:39620] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/shared/.env"] [unique_id "apjvYawUOJ55hWVbhHmUZAAAANg"]
[Wed Sep 02 22:54:10.124814 2026] [:error] [pid 1024:tid 139877077182208] [client 34.50.110.253:39622] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/deploy/.env"] [unique_id "apjvYqwUOJ55hWVbhHmUZgAAAM0"]
[Wed Sep 02 22:54:10.965932 2026] [:error] [pid 1150:tid 139877110753024] [client 34.50.110.253:39626] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/build/.env"] [unique_id "apjvYlandIN96G83sQYvFwAAAck"]
[Wed Sep 02 22:54:11.790028 2026] [:error] [pid 902:tid 139877119145728] [client 34.50.110.253:39638] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/dist/.env"] [unique_id "apjvY3D3UfRyd6VRADKdygAAAAg"]
[Wed Sep 02 22:54:12.771925 2026] [:error] [pid 1073:tid 139877152716544] [client 34.50.110.253:39648] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/public_html/.env"] [unique_id "apjvZFaa_Qo7NvRGH-AbPgAAAUQ"]
[Wed Sep 02 22:54:13.747978 2026] [:error] [pid 1024:tid 139877152716544] [client 34.50.110.253:39650] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/htdocs/.env"] [unique_id "apjvZawUOJ55hWVbhHmUaAAAAMQ"]
[Wed Sep 02 22:54:14.793878 2026] [:error] [pid 904:tid 139877043611392] [client 34.50.110.253:39662] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/www/.env"] [unique_id "apjvZg1jFUZnIigSyIOyjQAAAJE"]
[Wed Sep 02 22:54:15.668729 2026] [:error] [pid 904:tid 139877060396800] [client 34.50.110.253:39670] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/html/.env"] [unique_id "apjvZw1jFUZnIigSyIOyjgAAAI8"]
[Wed Sep 02 22:54:16.544988 2026] [:error] [pid 1150:tid 139877085574912] [client 34.50.110.253:39680] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/live/.env"] [unique_id "apjvaFandIN96G83sQYvGQAAAcw"]
[Wed Sep 02 22:54:17.447384 2026] [:error] [pid 1024:tid 139877110753024] [client 34.50.110.253:39692] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/prod/.env"] [unique_id "apjvaawUOJ55hWVbhHmUbgAAAMk"]
[Wed Sep 02 22:54:18.287250 2026] [:error] [pid 1150:tid 139877152716544] [client 34.50.110.253:39706] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/dev/.env"] [unique_id "apjvalandIN96G83sQYvHAAAAcQ"]
[Wed Sep 02 22:54:19.241421 2026] [:error] [pid 1149:tid 139877026825984] [client 34.50.110.253:59082] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/staging/.env"] [unique_id "apjva-5-Dlx-kBq1C1BucAAAAZM"]
[Wed Sep 02 22:54:20.283914 2026] [:error] [pid 1073:tid 139877240514304] [client 34.50.110.253:59092] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/opt/.env"] [unique_id "apjvbFaa_Qo7NvRGH-AbRAAAAUI"]
[Wed Sep 02 22:54:21.259724 2026] [:error] [pid 902:tid 139877085574912] [client 34.50.110.253:59096] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/laravel/.env"] [unique_id "apjvbXD3UfRyd6VRADKdzQAAAAw"]
[Wed Sep 02 22:54:22.261179 2026] [:error] [pid 1149:tid 139877077182208] [client 34.50.110.253:59102] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/symfony/.env"] [unique_id "apjvbu5-Dlx-kBq1C1BucQAAAY0"]
[Wed Sep 02 22:54:23.180767 2026] [:error] [pid 1024:tid 139877085574912] [client 34.50.110.253:59114] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wordpress/.env"] [unique_id "apjvb6wUOJ55hWVbhHmUcwAAAMw"]
[Wed Sep 02 22:54:24.050972 2026] [:error] [pid 1073:tid 139877110753024] [client 34.50.110.253:59116] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wp/.env"] [unique_id "apjvcFaa_Qo7NvRGH-AbRgAAAUk"]
[Wed Sep 02 22:54:24.943403 2026] [:error] [pid 1072:tid 139877026825984] [client 34.50.110.253:59120] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cms/.env"] [unique_id "apjvcFSr6Dum30GCXcQMrwAAARM"]
[Wed Sep 02 22:54:42.216354 2026] [:error] [pid 903:tid 139877144323840] [client 34.50.110.253:38226] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/drupal/.env"] [unique_id "apjvgq_SfnohFj1ZkMGsxAAAAEU"]
[Wed Sep 02 22:54:43.065718 2026] [:error] [pid 903:tid 139877232121600] [client 34.50.110.253:38242] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/joomla/.env"] [unique_id "apjvg6_SfnohFj1ZkMGsxgAAAEM"]
[Wed Sep 02 22:54:43.897741 2026] [:error] [pid 1150:tid 139877240514304] [client 34.50.110.253:38248] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/magento/.env"] [unique_id "apjvg1andIN96G83sQYvXwAAAcI"]
[Wed Sep 02 22:54:44.803690 2026] [:error] [pid 1024:tid 139877102360320] [client 34.50.110.253:38254] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/shopify/.env"] [unique_id "apjvhKwUOJ55hWVbhHmUiQAAAMo"]
[Wed Sep 02 22:54:45.700380 2026] [:error] [pid 902:tid 139877144323840] [client 34.50.110.253:38258] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/prestashop/.env"] [unique_id "apjvhXD3UfRyd6VRADKd2wAAAAU"]
[Wed Sep 02 22:54:46.494196 2026] [:error] [pid 1150:tid 139877043611392] [client 34.50.110.253:38274] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/codeigniter/.env"] [unique_id "apjvhlandIN96G83sQYvZwAAAdE"]
[Wed Sep 02 22:54:47.323423 2026] [:error] [pid 902:tid 139877001647872] [client 34.50.110.253:38288] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cakephp/.env"] [unique_id "apjvh3D3UfRyd6VRADKd3wAAABY"]
[Wed Sep 02 22:54:48.183492 2026] [:error] [pid 1150:tid 139876984862464] [client 34.50.110.253:38300] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/zend/.env"] [unique_id "apjviFandIN96G83sQYvagAAAdg"]
[Wed Sep 02 22:54:49.037673 2026] [:error] [pid 1150:tid 139877119145728] [client 34.50.110.253:33336] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/yii/.env"] [unique_id "apjviVandIN96G83sQYvbQAAAcg"]
[Wed Sep 02 22:54:49.890726 2026] [:error] [pid 903:tid 139877102360320] [client 34.50.110.253:33342] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/laravel5/.env"] [unique_id "apjvia_SfnohFj1ZkMGszAAAAEo"]
[Wed Sep 02 22:54:50.821475 2026] [:error] [pid 1150:tid 139877240514304] [client 34.50.110.253:33352] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/v1/.env"] [unique_id "apjvilandIN96G83sQYvdAAAAcI"]
[Wed Sep 02 22:54:51.688800 2026] [:error] [pid 904:tid 139877060396800] [client 34.50.110.253:33358] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/v2/.env"] [unique_id "apjviw1jFUZnIigSyIOypwAAAI8"]
[Wed Sep 02 22:54:52.714233 2026] [:error] [pid 902:tid 139877010040576] [client 34.50.110.253:33360] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/v3/.env"] [unique_id "apjvjHD3UfRyd6VRADKd4QAAABU"]
[Wed Sep 02 22:54:53.572193 2026] [:error] [pid 1073:tid 139877232121600] [client 34.50.110.253:33364] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/v1/.env"] [unique_id "apjvjVaa_Qo7NvRGH-AbfwAAAUM"]
[Wed Sep 02 22:54:54.419810 2026] [:error] [pid 1024:tid 139877035218688] [client 34.50.110.253:33368] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/v2/.env"] [unique_id "apjvjqwUOJ55hWVbhHmUjwAAANI"]
[Wed Sep 02 22:54:55.248796 2026] [:error] [pid 904:tid 139877232121600] [client 34.50.110.253:33384] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/rest/.env"] [unique_id "apjvjw1jFUZnIigSyIOyqAAAAIM"]
[Wed Sep 02 22:54:56.180897 2026] [:error] [pid 903:tid 139877068789504] [client 34.50.110.253:33390] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/graphql/.env"] [unique_id "apjvkK_SfnohFj1ZkMGszwAAAE4"]
[Wed Sep 02 22:54:57.103538 2026] [:error] [pid 902:tid 139877077182208] [client 34.50.110.253:33402] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/gateway/.env"] [unique_id "apjvkXD3UfRyd6VRADKd5AAAAA0"]
[Wed Sep 02 22:54:57.980484 2026] [:error] [pid 1073:tid 139877001647872] [client 34.50.110.253:33410] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/microservice/.env"] [unique_id "apjvkVaa_Qo7NvRGH-AbiAAAAVY"]
[Wed Sep 02 22:54:58.918918 2026] [:error] [pid 903:tid 139877232121600] [client 34.50.110.253:40368] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/service/.env"] [unique_id "apjvkq_SfnohFj1ZkMGs0wAAAEM"]
[Wed Sep 02 22:54:59.734877 2026] [:error] [pid 903:tid 139876993255168] [client 34.50.110.253:40380] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/v3/.env"] [unique_id "apjvk6_SfnohFj1ZkMGs1QAAAFc"]
[Wed Sep 02 22:55:00.555792 2026] [:error] [pid 1024:tid 139877052004096] [client 34.50.110.253:40382] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/dev/.env"] [unique_id "apjvlKwUOJ55hWVbhHmUlgAAANA"]
[Wed Sep 02 22:55:01.418029 2026] [:error] [pid 902:tid 139877152716544] [client 34.50.110.253:40388] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/staging/.env"] [unique_id "apjvlXD3UfRyd6VRADKd5wAAAAQ"]
[Wed Sep 02 22:55:02.341944 2026] [:error] [pid 904:tid 139877085574912] [client 34.50.110.253:40390] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/vendor/.env"] [unique_id "apjvlg1jFUZnIigSyIOyrQAAAIw"]
[Wed Sep 02 22:55:03.241222 2026] [:error] [pid 1024:tid 139877257299712] [client 34.50.110.253:40402] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/lib/.env"] [unique_id "apjvl6wUOJ55hWVbhHmUmwAAAMA"]
[Wed Sep 02 22:55:04.068494 2026] [:error] [pid 1150:tid 139877001647872] [client 34.50.110.253:40412] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/resources/.env"] [unique_id "apjvmFandIN96G83sQYvkwAAAdY"]
[Wed Sep 02 22:55:04.904298 2026] [:error] [pid 903:tid 139877001647872] [client 34.50.110.253:40428] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/assets/.env"] [unique_id "apjvmK_SfnohFj1ZkMGs2AAAAFY"]
[Wed Sep 02 22:55:05.833501 2026] [:error] [pid 904:tid 139877102360320] [client 34.50.110.253:40434] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/uploads/.env"] [unique_id "apjvmQ1jFUZnIigSyIOyrwAAAIo"]
[Wed Sep 02 22:55:06.750211 2026] [:error] [pid 904:tid 139877248907008] [client 34.50.110.253:40446] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/internal/.env"] [unique_id "apjvmg1jFUZnIigSyIOysAAAAIE"]
[Wed Sep 02 22:55:07.528942 2026] [:error] [pid 1072:tid 139877026825984] [client 34.50.110.253:40462] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/tools/.env"] [unique_id "apjvm1Sr6Dum30GCXcQMxwAAARM"]
[Wed Sep 02 22:55:08.394206 2026] [:error] [pid 1149:tid 139877257299712] [client 34.50.110.253:40464] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/scripts/.env"] [unique_id "apjvnO5-Dlx-kBq1C1BujAAAAYA"]
[Wed Sep 02 22:55:09.225397 2026] [:error] [pid 1073:tid 139877018433280] [client 34.50.110.253:52844] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/bin/.env"] [unique_id "apjvnVaa_Qo7NvRGH-AblwAAAVQ"]
[Wed Sep 02 22:55:10.070480 2026] [:error] [pid 1150:tid 139877135931136] [client 34.50.110.253:52850] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sbin/.env"] [unique_id "apjvnlandIN96G83sQYvnwAAAcY"]
[Wed Sep 02 22:55:11.049725 2026] [:error] [pid 1073:tid 139877240514304] [client 34.50.110.253:52866] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/local/.env"] [unique_id "apjvn1aa_Qo7NvRGH-AbmQAAAUI"]
[Wed Sep 02 22:55:11.911529 2026] [:error] [pid 1072:tid 139877102360320] [client 34.50.110.253:52868] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/portal/.env"] [unique_id "apjvn1Sr6Dum30GCXcQMygAAAQo"]
[Wed Sep 02 22:55:12.791983 2026] [:error] [pid 1073:tid 139877152716544] [client 34.50.110.253:52870] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/dashboard/.env"] [unique_id "apjvoFaa_Qo7NvRGH-AbngAAAUQ"]
[Wed Sep 02 22:55:13.648029 2026] [:error] [pid 1024:tid 139877248907008] [client 34.50.110.253:52878] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/panel/.env"] [unique_id "apjvoawUOJ55hWVbhHmUqAAAAME"]
[Wed Sep 02 22:55:14.515228 2026] [:error] [pid 1073:tid 139877043611392] [client 34.50.110.253:52880] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/crm/.env"] [unique_id "apjvolaa_Qo7NvRGH-AbogAAAVE"]
[Wed Sep 02 22:55:15.495586 2026] [:error] [pid 1073:tid 139877035218688] [client 34.50.110.253:52892] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/erp/.env"] [unique_id "apjvo1aa_Qo7NvRGH-AbpAAAAVI"]
[Wed Sep 02 22:55:16.359563 2026] [:error] [pid 1072:tid 139877257299712] [client 34.50.110.253:52908] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/shop/.env"] [unique_id "apjvpFSr6Dum30GCXcQMzgAAAQA"]
[Wed Sep 02 22:55:17.203703 2026] [:error] [pid 1150:tid 139877001647872] [client 34.50.110.253:52918] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/store/.env"] [unique_id "apjvpVandIN96G83sQYvxwAAAdY"]
[Wed Sep 02 22:55:18.035970 2026] [:error] [pid 1072:tid 139877035218688] [client 34.50.110.253:52926] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/saas/.env"] [unique_id "apjvplSr6Dum30GCXcQMzwAAARI"]
[Wed Sep 02 22:55:18.910021 2026] [:error] [pid 1150:tid 139877127538432] [client 34.50.110.253:35816] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/client/.env"] [unique_id "apjvplandIN96G83sQYvyAAAAcc"]
[Wed Sep 02 22:55:19.827402 2026] [:error] [pid 1072:tid 139877127538432] [client 34.50.110.253:35830] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/project/.env"] [unique_id "apjvp1Sr6Dum30GCXcQM0AAAAQc"]
[Wed Sep 02 22:55:20.639894 2026] [:error] [pid 1150:tid 139876993255168] [client 34.50.110.253:35834] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/admin-panel/.env"] [unique_id "apjvqFandIN96G83sQYvzwAAAdc"]
[Wed Sep 02 22:55:21.505695 2026] [:error] [pid 1073:tid 139876993255168] [client 34.50.110.253:35846] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/control-panel/.env"] [unique_id "apjvqVaa_Qo7NvRGH-AbqgAAAVc"]
[Wed Sep 02 22:55:22.392409 2026] [:error] [pid 1024:tid 139877144323840] [client 34.50.110.253:35852] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/user-panel/.env"] [unique_id "apjvqqwUOJ55hWVbhHmUrAAAAMU"]
[Wed Sep 02 22:55:23.232326 2026] [:error] [pid 1149:tid 139876993255168] [client 34.50.110.253:35862] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/node/.env"] [unique_id "apjvq-5-Dlx-kBq1C1BulwAAAZc"]
[Wed Sep 02 22:55:24.667839 2026] [:error] [pid 1150:tid 139877248907008] [client 34.50.110.253:35864] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/express/.env"] [unique_id "apjvrFandIN96G83sQYv1QAAAcE"]
[Wed Sep 02 22:55:25.587871 2026] [:error] [pid 1024:tid 139877135931136] [client 34.50.110.253:35874] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/next/.env"] [unique_id "apjvrawUOJ55hWVbhHmUrgAAAMY"]
[Wed Sep 02 22:55:26.542974 2026] [:error] [pid 1073:tid 139877077182208] [client 34.50.110.253:35884] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/nuxt/.env"] [unique_id "apjvrlaa_Qo7NvRGH-AbtAAAAU0"]
[Wed Sep 02 22:55:27.452603 2026] [:error] [pid 1150:tid 139877110753024] [client 34.50.110.253:35896] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/nest/.env"] [unique_id "apjvr1andIN96G83sQYv3AAAAck"]
[Wed Sep 02 22:55:28.256215 2026] [:error] [pid 1072:tid 139877043611392] [client 34.50.110.253:35900] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/react/.env"] [unique_id "apjvsFSr6Dum30GCXcQM0wAAARE"]
[Wed Sep 02 22:55:29.142651 2026] [:error] [pid 1073:tid 139877102360320] [client 34.50.110.253:44060] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/vue/.env"] [unique_id "apjvsVaa_Qo7NvRGH-AbugAAAUo"]
[Wed Sep 02 22:55:30.011611 2026] [:error] [pid 1073:tid 139877035218688] [client 34.50.110.253:44070] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/angular/.env"] [unique_id "apjvslaa_Qo7NvRGH-AbvgAAAVI"]
[Wed Sep 02 22:55:30.817274 2026] [:error] [pid 1024:tid 139877026825984] [client 34.50.110.253:44084] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/svelte/.env"] [unique_id "apjvsqwUOJ55hWVbhHmUsQAAANM"]
[Wed Sep 02 22:55:31.796954 2026] [:error] [pid 1073:tid 139877127538432] [client 34.50.110.253:44094] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/vite/.env"] [unique_id "apjvs1aa_Qo7NvRGH-AbxwAAAUc"]
[Wed Sep 02 22:55:32.716061 2026] [:error] [pid 1024:tid 139877093967616] [client 34.50.110.253:44098] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/backup/.env"] [unique_id "apjvtKwUOJ55hWVbhHmUsgAAAMs"]
[Wed Sep 02 22:55:33.617734 2026] [:error] [pid 1024:tid 139877110753024] [client 34.50.110.253:44110] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/backups/.env"] [unique_id "apjvtawUOJ55hWVbhHmUtAAAAMk"]
[Wed Sep 02 22:55:34.431419 2026] [:error] [pid 1073:tid 139877110753024] [client 34.50.110.253:44116] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/old/.env"] [unique_id "apjvtlaa_Qo7NvRGH-AbzAAAAUk"]
[Wed Sep 02 22:55:35.379496 2026] [:error] [pid 903:tid 139877035218688] [client 34.50.110.253:44128] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/tmp/.env"] [unique_id "apjvt6_SfnohFj1ZkMGs7gAAAFI"]
[Wed Sep 02 22:55:36.288626 2026] [:error] [pid 1072:tid 139877248907008] [client 34.50.110.253:44136] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/temp/.env"] [unique_id "apjvuFSr6Dum30GCXcQM2QAAAQE"]
[Wed Sep 02 22:55:37.233703 2026] [:error] [pid 902:tid 139877110753024] [client 34.50.110.253:44144] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/lab/.env"] [unique_id "apjvuXD3UfRyd6VRADKd-gAAAAk"]
[Wed Sep 02 22:55:38.071617 2026] [:error] [pid 1150:tid 139876984862464] [client 34.50.110.253:44152] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cronlab/.env"] [unique_id "apjvulandIN96G83sQYv7wAAAdg"]
[Wed Sep 02 22:55:39.070159 2026] [:error] [pid 1149:tid 139877144323840] [client 34.50.110.253:54742] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cron/.env"] [unique_id "apjvu-5-Dlx-kBq1C1BunQAAAYU"]
[Wed Sep 02 22:55:39.967088 2026] [:error] [pid 1150:tid 139877026825984] [client 34.50.110.253:54756] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/en/.env"] [unique_id "apjvu1andIN96G83sQYv9gAAAdM"]
[Wed Sep 02 22:55:40.910519 2026] [:error] [pid 1150:tid 139877127538432] [client 34.50.110.253:54772] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/administrator/.env"] [unique_id "apjvvFandIN96G83sQYv-QAAAcc"]
[Wed Sep 02 22:55:41.785146 2026] [:error] [pid 1073:tid 139877119145728] [client 34.50.110.253:54776] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/psnlink/.env"] [unique_id "apjvvVaa_Qo7NvRGH-Ab2wAAAUg"]
[Wed Sep 02 22:55:42.589857 2026] [:error] [pid 1150:tid 139877257299712] [client 34.50.110.253:54782] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/exapi/.env"] [unique_id "apjvvlandIN96G83sQYwAwAAAcA"]
[Wed Sep 02 22:55:43.486731 2026] [:error] [pid 1150:tid 139877093967616] [client 34.50.110.253:54796] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sitemaps/.env"] [unique_id "apjvv1andIN96G83sQYwDwAAAcs"]
[Wed Sep 02 22:55:44.479281 2026] [:error] [pid 1150:tid 139876984862464] [client 34.50.110.253:54808] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.backup1"] [unique_id "apjvwFandIN96G83sQYwFgAAAdg"]
[Wed Sep 02 22:55:45.468590 2026] [:error] [pid 1150:tid 139876993255168] [client 34.50.110.253:54812] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.backup2"] [unique_id "apjvwVandIN96G83sQYwIgAAAdc"]
[Wed Sep 02 22:55:46.592041 2026] [:error] [pid 1150:tid 139877257299712] [client 34.50.110.253:54814] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/logs/.env"] [unique_id "apjvwlandIN96G83sQYwLAAAAcA"]
[Wed Sep 02 22:55:47.575088 2026] [:error] [pid 1150:tid 139877232121600] [client 34.50.110.253:54824] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cache/.env"] [unique_id "apjvw1andIN96G83sQYwMQAAAcM"]
[Wed Sep 02 22:55:48.503330 2026] [:error] [pid 1150:tid 139877135931136] [client 34.50.110.253:54828] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mailer/.env"] [unique_id "apjvxFandIN96G83sQYwNgAAAcY"]
[Wed Sep 02 22:55:49.308818 2026] [:error] [pid 1150:tid 139877110753024] [client 34.50.110.253:41728] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mail/.env"] [unique_id "apjvxVandIN96G83sQYwNwAAAck"]
[Wed Sep 02 22:55:50.422838 2026] [:error] [pid 1024:tid 139877093967616] [client 34.50.110.253:41744] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/email/.env"] [unique_id "apjvxqwUOJ55hWVbhHmUygAAAMs"]
[Wed Sep 02 22:55:51.348266 2026] [:error] [pid 1150:tid 139877240514304] [client 34.50.110.253:41750] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/smtp/.env"] [unique_id "apjvx1andIN96G83sQYwPgAAAcI"]
[Wed Sep 02 22:55:52.221023 2026] [:error] [pid 902:tid 139877001647872] [client 34.50.110.253:41760] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mailing/.env"] [unique_id "apjvyHD3UfRyd6VRADKeBAAAABY"]
[Wed Sep 02 22:55:53.132424 2026] [:error] [pid 904:tid 139877240514304] [client 34.50.110.253:41770] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/notifications/.env"] [unique_id "apjvyQ1jFUZnIigSyIOy0wAAAII"]
[Wed Sep 02 22:55:54.135594 2026] [:error] [pid 1149:tid 139877052004096] [client 34.50.110.253:41780] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/notify/.env"] [unique_id "apjvyu5-Dlx-kBq1C1BurwAAAZA"]
[Wed Sep 02 22:55:54.988988 2026] [:error] [pid 904:tid 139877052004096] [client 34.50.110.253:41782] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sender/.env"] [unique_id "apjvyg1jFUZnIigSyIOy1wAAAJA"]
[Wed Sep 02 22:55:55.852172 2026] [:error] [pid 903:tid 139877085574912] [client 34.50.110.253:41788] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/campaign/.env"] [unique_id "apjvy6_SfnohFj1ZkMGtBgAAAEw"]
[Wed Sep 02 22:55:56.844425 2026] [:error] [pid 1073:tid 139877026825984] [client 34.50.110.253:41796] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/newsletter/.env"] [unique_id "apjvzFaa_Qo7NvRGH-AcAAAAAVM"]
[Wed Sep 02 22:55:57.719381 2026] [:error] [pid 904:tid 139877018433280] [client 34.50.110.253:41798] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/ses/.env"] [unique_id "apjvzQ1jFUZnIigSyIOy2QAAAJQ"]
[Wed Sep 02 22:55:58.653041 2026] [:error] [pid 1150:tid 139877127538432] [client 34.50.110.253:41806] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sendgrid/.env"] [unique_id "apjvzlandIN96G83sQYwQgAAAcc"]
[Wed Sep 02 22:55:59.576168 2026] [:error] [pid 1072:tid 139877060396800] [client 34.50.110.253:41116] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sparkpost/.env"] [unique_id "apjvz1Sr6Dum30GCXcQM7QAAAQ8"]
[Wed Sep 02 22:56:00.488741 2026] [:error] [pid 1150:tid 139876993255168] [client 34.50.110.253:41130] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/postmark/.env"] [unique_id "apjv0FandIN96G83sQYwQwAAAdc"]
[Wed Sep 02 22:56:01.421946 2026] [:error] [pid 1073:tid 139877001647872] [client 34.50.110.253:41136] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mailgun/.env"] [unique_id "apjv0Vaa_Qo7NvRGH-AcBQAAAVY"]
[Wed Sep 02 22:56:02.222751 2026] [:error] [pid 1073:tid 139877240514304] [client 34.50.110.253:41144] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mandrill/.env"] [unique_id "apjv0laa_Qo7NvRGH-AcBgAAAUI"]
[Wed Sep 02 22:56:03.012797 2026] [:error] [pid 1072:tid 139877068789504] [client 34.50.110.253:41148] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mailjet/.env"] [unique_id "apjv01Sr6Dum30GCXcQM8AAAAQ4"]
[Wed Sep 02 22:56:03.935314 2026] [:error] [pid 1024:tid 139877232121600] [client 34.50.110.253:41152] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/brevo/.env"] [unique_id "apjv06wUOJ55hWVbhHmU2AAAAMM"]
[Wed Sep 02 22:56:04.833734 2026] [:error] [pid 1150:tid 139877093967616] [client 34.50.110.253:41156] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/transactional/.env"] [unique_id "apjv1FandIN96G83sQYwSQAAAcs"]
[Wed Sep 02 22:56:05.708521 2026] [:error] [pid 1073:tid 139877119145728] [client 34.50.110.253:41170] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/bulk/.env"] [unique_id "apjv1Vaa_Qo7NvRGH-AcCwAAAUg"]
[Wed Sep 02 22:56:06.479810 2026] [:error] [pid 1150:tid 139877135931136] [client 34.50.110.253:41172] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/aws/.env"] [unique_id "apjv1landIN96G83sQYwTQAAAcY"]
[Wed Sep 02 22:56:07.402013 2026] [:error] [pid 1024:tid 139877068789504] [client 34.50.110.253:41178] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/azure/.env"] [unique_id "apjv16wUOJ55hWVbhHmU3QAAAM4"]
[Wed Sep 02 22:56:08.286806 2026] [:error] [pid 1073:tid 139877026825984] [client 34.50.110.253:41190] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/gcp/.env"] [unique_id "apjv2Faa_Qo7NvRGH-AcDQAAAVM"]
[Wed Sep 02 22:56:09.079922 2026] [:error] [pid 1150:tid 139877144323840] [client 34.50.110.253:41662] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cloud/.env"] [unique_id "apjv2VandIN96G83sQYwWgAAAcU"]
[Wed Sep 02 22:56:09.924634 2026] [:error] [pid 1024:tid 139877248907008] [client 34.50.110.253:41676] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/infrastructure/.env"] [unique_id "apjv2awUOJ55hWVbhHmU4QAAAME"]
[Wed Sep 02 22:56:10.855801 2026] [:error] [pid 1150:tid 139877248907008] [client 34.50.110.253:41680] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/docker/.env"] [unique_id "apjv2landIN96G83sQYwZAAAAcE"]
[Wed Sep 02 22:56:11.688833 2026] [:error] [pid 1024:tid 139877026825984] [client 34.50.110.253:41696] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/k8s/.env"] [unique_id "apjv26wUOJ55hWVbhHmU4gAAANM"]
[Wed Sep 02 22:56:12.474898 2026] [:error] [pid 1073:tid 139877010040576] [client 34.50.110.253:41712] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/kubernetes/.env"] [unique_id "apjv3Faa_Qo7NvRGH-AcEQAAAVU"]
[Wed Sep 02 22:56:13.319437 2026] [:error] [pid 1150:tid 139877248907008] [client 34.50.110.253:41716] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/terraform/.env"] [unique_id "apjv3VandIN96G83sQYwbgAAAcE"]
[Wed Sep 02 22:56:14.215609 2026] [:error] [pid 1073:tid 139877077182208] [client 34.50.110.253:41722] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/ansible/.env"] [unique_id "apjv3laa_Qo7NvRGH-AcFQAAAU0"]
[Wed Sep 02 22:56:15.061669 2026] [:error] [pid 1150:tid 139877060396800] [client 34.50.110.253:41726] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/.env"] [unique_id "apjv31andIN96G83sQYwcgAAAc8"]
[Wed Sep 02 22:56:15.840695 2026] [:error] [pid 1150:tid 139877052004096] [client 34.50.110.253:41734] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/ci/.env"] [unique_id "apjv31andIN96G83sQYwdQAAAdA"]
[Wed Sep 02 22:56:16.638072 2026] [:error] [pid 1072:tid 139877093967616] [client 34.50.110.253:41750] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cd/.env"] [unique_id "apjv4FSr6Dum30GCXcQM9QAAAQs"]
[Wed Sep 02 22:56:17.456301 2026] [:error] [pid 1072:tid 139877043611392] [client 34.50.110.253:41764] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/jenkins/.env"] [unique_id "apjv4VSr6Dum30GCXcQM9gAAARE"]
[Wed Sep 02 22:56:18.266765 2026] [:error] [pid 904:tid 139877248907008] [client 34.50.110.253:41774] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/gitlab/.env"] [unique_id "apjv4g1jFUZnIigSyIOy3gAAAIE"]
[Wed Sep 02 22:56:19.044144 2026] [:error] [pid 904:tid 139877043611392] [client 34.50.110.253:52580] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/github/.env"] [unique_id "apjv4w1jFUZnIigSyIOy4AAAAJE"]
[Wed Sep 02 22:56:19.883681 2026] [:error] [pid 903:tid 139877102360320] [client 34.50.110.253:52594] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/actions/.env"] [unique_id "apjv46_SfnohFj1ZkMGtFQAAAEo"]
[Wed Sep 02 22:56:20.851512 2026] [:error] [pid 1024:tid 139877144323840] [client 34.50.110.253:52610] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/circleci/.env"] [unique_id "apjv5KwUOJ55hWVbhHmU5gAAAMU"]
[Wed Sep 02 22:56:21.654540 2026] [:error] [pid 1150:tid 139877144323840] [client 34.50.110.253:52626] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/travis/.env"] [unique_id "apjv5VandIN96G83sQYwfwAAAcU"]
[Wed Sep 02 22:56:22.580915 2026] [:error] [pid 1073:tid 139877035218688] [client 34.50.110.253:52642] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/buildkite/.env"] [unique_id "apjv5laa_Qo7NvRGH-AcHgAAAVI"]
[Wed Sep 02 22:56:23.381846 2026] [:error] [pid 1073:tid 139877102360320] [client 34.50.110.253:52648] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mysql/.env"] [unique_id "apjv51aa_Qo7NvRGH-AcIAAAAUo"]
[Wed Sep 02 22:56:24.245006 2026] [:error] [pid 1150:tid 139877257299712] [client 34.50.110.253:52650] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/postgres/.env"] [unique_id "apjv6FandIN96G83sQYwhgAAAcA"]
[Wed Sep 02 22:56:25.133465 2026] [:error] [pid 902:tid 139877035218688] [client 34.50.110.253:52660] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mongodb/.env"] [unique_id "apjv6XD3UfRyd6VRADKeEwAAABI"]
[Wed Sep 02 22:56:25.966753 2026] [:error] [pid 1150:tid 139877144323840] [client 34.50.110.253:52664] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/redis/.env"] [unique_id "apjv6VandIN96G83sQYwjAAAAcU"]
[Wed Sep 02 22:56:26.829158 2026] [:error] [pid 904:tid 139877152716544] [client 34.50.110.253:52676] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/elasticsearch/.env"] [unique_id "apjv6g1jFUZnIigSyIOy4wAAAIQ"]
[Wed Sep 02 22:56:27.650354 2026] [:error] [pid 1150:tid 139877043611392] [client 34.50.110.253:52688] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/rabbitmq/.env"] [unique_id "apjv61andIN96G83sQYwjgAAAdE"]
[Wed Sep 02 22:56:28.465473 2026] [:error] [pid 904:tid 139877232121600] [client 34.50.110.253:52698] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/kafka/.env"] [unique_id "apjv7A1jFUZnIigSyIOy5QAAAIM"]
[Wed Sep 02 22:56:29.228725 2026] [:error] [pid 1072:tid 139877240514304] [client 34.50.110.253:34864] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/queue/.env"] [unique_id "apjv7VSr6Dum30GCXcQM-gAAAQI"]
[Wed Sep 02 22:56:30.041248 2026] [:error] [pid 1149:tid 139877077182208] [client 34.50.110.253:34874] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/worker/.env"] [unique_id "apjv7u5-Dlx-kBq1C1ButgAAAY0"]
[Wed Sep 02 22:56:30.846682 2026] [:error] [pid 1073:tid 139877043611392] [client 34.50.110.253:34878] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/job/.env"] [unique_id "apjv7laa_Qo7NvRGH-AcJAAAAVE"]
[Wed Sep 02 22:56:31.627328 2026] [:error] [pid 903:tid 139877119145728] [client 34.50.110.253:34888] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/test/.env"] [unique_id "apjv76_SfnohFj1ZkMGtHAAAAEg"]
[Wed Sep 02 22:56:32.480983 2026] [:error] [pid 1024:tid 139877240514304] [client 34.50.110.253:34890] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/qa/.env"] [unique_id "apjv8KwUOJ55hWVbhHmU7QAAAMI"]
[Wed Sep 02 22:56:33.225820 2026] [:error] [pid 902:tid 139877093967616] [client 34.50.110.253:34892] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/preview/.env"] [unique_id "apjv8XD3UfRyd6VRADKeGAAAAAs"]
[Wed Sep 02 22:56:33.980352 2026] [:error] [pid 1073:tid 139877018433280] [client 34.50.110.253:34904] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/beta/.env"] [unique_id "apjv8Vaa_Qo7NvRGH-AcJQAAAVQ"]
[Wed Sep 02 22:56:34.756779 2026] [:error] [pid 1024:tid 139877127538432] [client 34.50.110.253:34908] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/uat/.env"] [unique_id "apjv8qwUOJ55hWVbhHmU7wAAAMc"]
[Wed Sep 02 22:56:35.565137 2026] [:error] [pid 1073:tid 139877240514304] [client 34.50.110.253:34922] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/stage/.env"] [unique_id "apjv81aa_Qo7NvRGH-AcJwAAAUI"]
[Wed Sep 02 22:56:36.350267 2026] [:error] [pid 904:tid 139876993255168] [client 34.50.110.253:34930] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/development/.env"] [unique_id "apjv9A1jFUZnIigSyIOy6AAAAJc"]
[Wed Sep 02 22:56:37.173005 2026] [:error] [pid 1072:tid 139877257299712] [client 34.50.110.253:34938] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/production/.env"] [unique_id "apjv9VSr6Dum30GCXcQM_QAAAQA"]
[Wed Sep 02 22:56:37.973269 2026] [:error] [pid 1150:tid 139877119145728] [client 34.50.110.253:34952] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/config/app/.env"] [unique_id "apjv9VandIN96G83sQYwnAAAAcg"]
[Wed Sep 02 22:56:38.730227 2026] [proxy_fcgi:error] [pid 1150:tid 139877127538432] [client 34.50.110.253:37384] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:39.549596 2026] [proxy_fcgi:error] [pid 1150:tid 139877026825984] [client 34.50.110.253:37398] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:40.347827 2026] [proxy_fcgi:error] [pid 1150:tid 139877240514304] [client 34.50.110.253:37406] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:41.177414 2026] [proxy_fcgi:error] [pid 1149:tid 139877068789504] [client 34.50.110.253:37410] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:41.950549 2026] [proxy_fcgi:error] [pid 1150:tid 139877001647872] [client 34.50.110.253:37418] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:42.805410 2026] [proxy_fcgi:error] [pid 1150:tid 139877052004096] [client 34.50.110.253:37420] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:43.678213 2026] [proxy_fcgi:error] [pid 904:tid 139877010040576] [client 34.50.110.253:37426] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:45.321157 2026] [proxy_fcgi:error] [pid 1150:tid 139877248907008] [client 34.50.110.253:37434] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:46.115149 2026] [proxy_fcgi:error] [pid 903:tid 139877257299712] [client 34.50.110.253:37438] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:47.027544 2026] [proxy_fcgi:error] [pid 1073:tid 139877232121600] [client 34.50.110.253:37446] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:52.930302 2026] [proxy_fcgi:error] [pid 1150:tid 139877232121600] [client 34.50.110.253:52920] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:53.681838 2026] [proxy_fcgi:error] [pid 1150:tid 139877068789504] [client 34.50.110.253:52932] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:54.450307 2026] [proxy_fcgi:error] [pid 1150:tid 139877144323840] [client 34.50.110.253:52934] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:55.255582 2026] [proxy_fcgi:error] [pid 1073:tid 139877052004096] [client 34.50.110.253:52946] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:56.128893 2026] [proxy_fcgi:error] [pid 903:tid 139877035218688] [client 34.50.110.253:52960] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:56.919780 2026] [proxy_fcgi:error] [pid 1073:tid 139877026825984] [client 34.50.110.253:52976] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:56:59.404514 2026] [:error] [pid 1150:tid 139877018433280] [client 34.50.110.253:59844] [client 34.50.110.253] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/webroot/index.php/_environment"] [unique_id "apjwC1andIN96G83sQYxAAAAAdQ"]
[Wed Sep 02 22:57:00.280554 2026] [:error] [pid 1150:tid 139877232121600] [client 34.50.110.253:59850] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mail/phpinfo.php"] [unique_id "apjwDFandIN96G83sQYxBQAAAcM"]
[Wed Sep 02 22:57:01.108230 2026] [:error] [pid 903:tid 139877144323840] [client 34.50.110.253:59858] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cpanel/phpinfo.php"] [unique_id "apjwDa_SfnohFj1ZkMGtWAAAAEU"]
[Wed Sep 02 22:57:01.956236 2026] [:error] [pid 1150:tid 139877135931136] [client 34.50.110.253:59862] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hosting/phpinfo.php"] [unique_id "apjwDVandIN96G83sQYxDAAAAcY"]
[Wed Sep 02 22:57:02.829219 2026] [:error] [pid 1072:tid 139877248907008] [client 34.50.110.253:59864] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/webmail/phpinfo.php"] [unique_id "apjwDlSr6Dum30GCXcQNCgAAAQE"]
[Wed Sep 02 22:57:03.589207 2026] [:error] [pid 1150:tid 139877085574912] [client 34.50.110.253:59876] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/smtp/phpinfo.php"] [unique_id "apjwD1andIN96G83sQYxFAAAAcw"]
[Wed Sep 02 22:57:04.360496 2026] [:error] [pid 1024:tid 139876984862464] [client 34.50.110.253:59890] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo.php.bak"] [unique_id "apjwEKwUOJ55hWVbhHmVFgAAANg"]
[Wed Sep 02 22:57:05.147245 2026] [:error] [pid 1150:tid 139877152716544] [client 34.50.110.253:59904] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo.php.old"] [unique_id "apjwEVandIN96G83sQYxHAAAAcQ"]
[Wed Sep 02 22:57:06.086517 2026] [:error] [pid 1150:tid 139877085574912] [client 34.50.110.253:59914] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo.php~"] [unique_id "apjwElandIN96G83sQYxIAAAAcw"]
[Wed Sep 02 22:57:06.967270 2026] [:error] [pid 1150:tid 139877240514304] [client 34.50.110.253:59930] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/info.php.bak"] [unique_id "apjwElandIN96G83sQYxIQAAAcI"]
[Wed Sep 02 22:57:07.795868 2026] [:error] [pid 1073:tid 139877127538432] [client 34.50.110.253:59932] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo.php.save"] [unique_id "apjwE1aa_Qo7NvRGH-AcbwAAAUc"]
[Wed Sep 02 22:57:08.613625 2026] [:error] [pid 904:tid 139877257299712] [client 34.50.110.253:54478] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/staging/phpinfo.php"] [unique_id "apjwFA1jFUZnIigSyIOy-wAAAIA"]
[Wed Sep 02 22:57:09.377503 2026] [:error] [pid 1150:tid 139877052004096] [client 34.50.110.253:54486] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/beta/phpinfo.php"] [unique_id "apjwFVandIN96G83sQYxMwAAAdA"]
[Wed Sep 02 22:57:10.321327 2026] [:error] [pid 1150:tid 139877248907008] [client 34.50.110.253:54500] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/uat/phpinfo.php"] [unique_id "apjwFlandIN96G83sQYxNgAAAcE"]
[Wed Sep 02 22:57:11.157562 2026] [:error] [pid 1150:tid 139877077182208] [client 34.50.110.253:54502] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/qa/phpinfo.php"] [unique_id "apjwF1andIN96G83sQYxOAAAAc0"]
[Wed Sep 02 22:57:11.941015 2026] [:error] [pid 1073:tid 139877060396800] [client 34.50.110.253:54518] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/preview/phpinfo.php"] [unique_id "apjwF1aa_Qo7NvRGH-AcdgAAAU8"]
[Wed Sep 02 22:57:12.783025 2026] [:error] [pid 904:tid 139877110753024] [client 34.50.110.253:54532] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/www/phpinfo.php"] [unique_id "apjwGA1jFUZnIigSyIOzAAAAAIk"]
[Wed Sep 02 22:57:13.565474 2026] [:error] [pid 1073:tid 139877052004096] [client 34.50.110.253:54542] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/htdocs/phpinfo.php"] [unique_id "apjwGVaa_Qo7NvRGH-AcegAAAVA"]
[Wed Sep 02 22:57:14.396289 2026] [:error] [pid 1150:tid 139877240514304] [client 34.50.110.253:54548] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public_html/phpinfo.php"] [unique_id "apjwGlandIN96G83sQYxRwAAAcI"]
[Wed Sep 02 22:57:28.158899 2026] [:error] [pid 1149:tid 139877119145728] [client 34.50.110.253:56974] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/site/phpinfo.php"] [unique_id "apjwKO5-Dlx-kBq1C1Bu6QAAAYg"]
[Wed Sep 02 22:57:28.912861 2026] [:error] [pid 1150:tid 139877068789504] [client 34.50.110.253:47134] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/docs/phpinfo.php"] [unique_id "apjwKFandIN96G83sQYxgwAAAc4"]
[Wed Sep 02 22:57:29.679494 2026] [:error] [pid 1073:tid 139877135931136] [client 34.50.110.253:47144] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "apjwKVaa_Qo7NvRGH-AcmwAAAUY"]
[Wed Sep 02 22:57:30.498695 2026] [:error] [pid 1150:tid 139877232121600] [client 34.50.110.253:47148] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/administrator/phpinfo.php"] [unique_id "apjwKlandIN96G83sQYxhQAAAcM"]
[Wed Sep 02 22:57:31.316071 2026] [:error] [pid 1150:tid 139877257299712] [client 34.50.110.253:47154] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/core/phpinfo.php"] [unique_id "apjwK1andIN96G83sQYxiAAAAcA"]
[Wed Sep 02 22:57:32.093572 2026] [:error] [pid 1150:tid 139877127538432] [client 34.50.110.253:47162] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/includes/phpinfo.php"] [unique_id "apjwLFandIN96G83sQYxjQAAAcc"]
[Wed Sep 02 22:57:32.873831 2026] [:error] [pid 903:tid 139877077182208] [client 34.50.110.253:47168] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/service-account.json"] [unique_id "apjwLK_SfnohFj1ZkMGtewAAAE0"]
[Wed Sep 02 22:57:33.651769 2026] [:error] [pid 1150:tid 139877248907008] [client 34.50.110.253:47184] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sa.json"] [unique_id "apjwLVandIN96G83sQYxlAAAAcE"]
[Wed Sep 02 22:57:34.539270 2026] [:error] [pid 903:tid 139876993255168] [client 34.50.110.253:47200] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gcp-key.json"] [unique_id "apjwLq_SfnohFj1ZkMGtfgAAAFc"]
[Wed Sep 02 22:57:35.292447 2026] [:error] [pid 903:tid 139877093967616] [client 34.50.110.253:47202] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gcp-credentials.json"] [unique_id "apjwL6_SfnohFj1ZkMGtggAAAEs"]
[Wed Sep 02 22:57:36.096773 2026] [:error] [pid 1024:tid 139877043611392] [client 34.50.110.253:47212] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gcp-sa.json"] [unique_id "apjwMKwUOJ55hWVbhHmVSAAAANE"]
[Wed Sep 02 22:57:36.907239 2026] [:error] [pid 1150:tid 139877052004096] [client 34.50.110.253:47214] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/credentials.json"] [unique_id "apjwMFandIN96G83sQYxnQAAAdA"]
[Wed Sep 02 22:57:37.737425 2026] [:error] [pid 1150:tid 139877001647872] [client 34.50.110.253:47230] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/google-credentials.json"] [unique_id "apjwMVandIN96G83sQYxngAAAdY"]
[Wed Sep 02 22:57:38.582812 2026] [:error] [pid 1073:tid 139876993255168] [client 34.50.110.253:47242] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/google-key.json"] [unique_id "apjwMlaa_Qo7NvRGH-AcqAAAAVc"]
[Wed Sep 02 22:57:39.364482 2026] [:error] [pid 1073:tid 139877043611392] [client 34.50.110.253:46788] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/.config/gcloud/application_default_credentials.json"] [unique_id "apjwM1aa_Qo7NvRGH-AcqQAAAVE"]
[Wed Sep 02 22:57:40.133725 2026] [:error] [pid 1149:tid 139877240514304] [client 34.50.110.253:46800] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/application_default_credentials.json"] [unique_id "apjwNO5-Dlx-kBq1C1Bu-AAAAYI"]
[Wed Sep 02 22:57:40.901153 2026] [:error] [pid 1150:tid 139877127538432] [client 34.50.110.253:46812] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/key.json"] [unique_id "apjwNFandIN96G83sQYxpAAAAcc"]
[Wed Sep 02 22:57:41.652967 2026] [:error] [pid 904:tid 139877110753024] [client 34.50.110.253:46826] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/keyfile.json"] [unique_id "apjwNQ1jFUZnIigSyIOzFgAAAIk"]
[Wed Sep 02 22:57:42.437067 2026] [:error] [pid 1150:tid 139876993255168] [client 34.50.110.253:46834] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/firebase-adminsdk.json"] [unique_id "apjwNlandIN96G83sQYxpgAAAdc"]
[Wed Sep 02 22:57:43.254342 2026] [:error] [pid 1150:tid 139877110753024] [client 34.50.110.253:46844] [client 34.50.110.253] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/firebase-key.json"] [unique_id "apjwN1andIN96G83sQYxqAAAAck"]
[Wed Sep 02 23:04:51.333442 2026] [proxy_fcgi:error] [pid 1150:tid 139877052004096] [client 165.22.91.167:37930] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 23:25:12.833861 2026] [authz_core:error] [pid 904:tid 139876993255168] [client 115.79.24.90:53572] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Wed Sep 02 23:53:53.989959 2026] [proxy_fcgi:error] [pid 904:tid 139877060396800] [client 178.62.25.62:38724] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 23:54:45.612752 2026] [:error] [pid 904:tid 139876993255168] [client 34.138.112.47:42298] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/htdocs/.git/config"] [unique_id "apj9lQ1jFUZnIigSyIO4KgAAAJc"]
[Wed Sep 02 23:54:45.613345 2026] [:error] [pid 1149:tid 139877119145728] [client 34.138.112.47:42250] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/var/www/.git/config"] [unique_id "apj9le5-Dlx-kBq1C1B1AQAAAYg"]
[Wed Sep 02 23:54:45.612752 2026] [:error] [pid 1073:tid 139877240514304] [client 34.138.112.47:42266] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/src/.git/config"] [unique_id "apj9lVaa_Qo7NvRGH-Ar_gAAAUI"]
[Wed Sep 02 23:54:45.612773 2026] [:error] [pid 1072:tid 139877144323840] [client 34.138.112.47:42326] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wordpress/.git/config"] [unique_id "apj9lVSr6Dum30GCXcQSmgAAAQU"]
[Wed Sep 02 23:54:45.613169 2026] [:error] [pid 904:tid 139877240514304] [client 34.138.112.47:42274] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/public/.git/config"] [unique_id "apj9lQ1jFUZnIigSyIO4KwAAAII"]
[Wed Sep 02 23:54:45.614286 2026] [:error] [pid 1149:tid 139877077182208] [client 34.138.112.47:42284] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/app/.git/config"] [unique_id "apj9le5-Dlx-kBq1C1B1AwAAAY0"]
[Wed Sep 02 23:54:45.614384 2026] [:error] [pid 1149:tid 139877068789504] [client 34.138.112.47:42310] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "apj9le5-Dlx-kBq1C1B1AgAAAY4"]
[Wed Sep 02 23:54:45.614479 2026] [:error] [pid 1149:tid 139877093967616] [client 34.138.112.47:42342] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/site/.git/config"] [unique_id "apj9le5-Dlx-kBq1C1B1BAAAAYs"]
[Wed Sep 02 23:54:45.614873 2026] [:error] [pid 1149:tid 139877257299712] [client 34.138.112.47:42264] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/.git/config"] [unique_id "apj9le5-Dlx-kBq1C1B1BQAAAYA"]
[Wed Sep 02 23:54:45.615187 2026] [:error] [pid 1149:tid 139877152716544] [client 34.138.112.47:42302] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/backend/.git/config"] [unique_id "apj9le5-Dlx-kBq1C1B1BwAAAYQ"]
[Wed Sep 02 23:54:45.615195 2026] [:error] [pid 1149:tid 139877135931136] [client 34.138.112.47:42292] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/www/.git/config"] [unique_id "apj9le5-Dlx-kBq1C1B1BgAAAYY"]
[Wed Sep 02 23:54:45.615284 2026] [:error] [pid 1072:tid 139877135931136] [client 34.138.112.47:42242] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/html/.git/config"] [unique_id "apj9lVSr6Dum30GCXcQSmwAAAQY"]
[Wed Sep 02 23:54:45.823760 2026] [:error] [pid 1072:tid 139877077182208] [client 34.138.112.47:34578] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/src/.git/config"] [unique_id "apj9lVSr6Dum30GCXcQSnQAAAQ0"]
[Wed Sep 02 23:54:45.823771 2026] [:error] [pid 1149:tid 139877110753024] [client 34.138.112.47:34588] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/var/www/.git/config"] [unique_id "apj9le5-Dlx-kBq1C1B1CQAAAYk"]
[Wed Sep 02 23:54:45.824255 2026] [:error] [pid 1150:tid 139877068789504] [client 34.138.112.47:34590] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/app/.git/config"] [unique_id "apj9lVandIN96G83sQZKPAAAAc4"]
[Wed Sep 02 23:54:45.824475 2026] [:error] [pid 902:tid 139876993255168] [client 34.138.112.47:34606] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/public/.git/config"] [unique_id "apj9lXD3UfRyd6VRADKjmAAAABc"]
[Wed Sep 02 23:54:45.824567 2026] [:error] [pid 1024:tid 139877102360320] [client 34.138.112.47:34596] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/htdocs/.git/config"] [unique_id "apj9lawUOJ55hWVbhHmfGgAAAMo"]
[Wed Sep 02 23:54:45.824688 2026] [:error] [pid 1024:tid 139877135931136] [client 34.138.112.47:34602] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wordpress/.git/config"] [unique_id "apj9lawUOJ55hWVbhHmfGQAAAMY"]
[Wed Sep 02 23:54:45.825159 2026] [:error] [pid 1150:tid 139877135931136] [client 34.138.112.47:34612] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/.git/config"] [unique_id "apj9lVandIN96G83sQZKPQAAAcY"]
[Wed Sep 02 23:54:45.825329 2026] [:error] [pid 903:tid 139877232121600] [client 34.138.112.47:34624] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/site/.git/config"] [unique_id "apj9la_SfnohFj1ZkMG0jgAAAEM"]
[Wed Sep 02 23:54:45.825439 2026] [:error] [pid 1150:tid 139877248907008] [client 34.138.112.47:34618] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "apj9lVandIN96G83sQZKPgAAAcE"]
[Wed Sep 02 23:54:45.825963 2026] [:error] [pid 902:tid 139877035218688] [client 34.138.112.47:34634] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/www/.git/config"] [unique_id "apj9lXD3UfRyd6VRADKjmQAAABI"]
[Wed Sep 02 23:54:45.826139 2026] [:error] [pid 1024:tid 139877240514304] [client 34.138.112.47:34660] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/html/.git/config"] [unique_id "apj9lawUOJ55hWVbhHmfGwAAAMI"]
[Wed Sep 02 23:54:45.826198 2026] [:error] [pid 1024:tid 139877257299712] [client 34.138.112.47:34650] [client 34.138.112.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/backend/.git/config"] [unique_id "apj9lawUOJ55hWVbhHmfHAAAAMA"]
[Thu Sep 03 00:51:10.049811 2026] [proxy_fcgi:error] [pid 1072:tid 139877152716544] [client 104.236.41.186:50380] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 00:54:41.216170 2026] [authz_core:error] [pid 1150:tid 139877248907008] [client 212.200.255.44:53418] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Thu Sep 03 01:01:50.190137 2026] [:error] [pid 1150:tid 139877093967616] [client 43.138.68.113:39752] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apkNTlandIN96G83sQZmZQAAAcs"]
[Thu Sep 03 01:58:24.756970 2026] [:error] [pid 1150:tid 139877085574912] [client 170.106.84.136:60214] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apkakFandIN96G83sQZ9SAAAAcw"]
[Thu Sep 03 02:40:57.406094 2026] [:error] [pid 1024:tid 139877240514304] [client 43.164.192.151:36698] [client 43.164.192.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apkkiawUOJ55hWVbhHm45gAAAMI"]
[Thu Sep 03 03:06:38.225753 2026] [proxy_fcgi:error] [pid 1072:tid 139877119145728] [client 183.111.125.26:53058] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:45:12.965247 2026] [:error] [pid 14235:tid 139688132331264] [client 203.189.153.19:61190] [client 203.189.153.19] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "apkzmF6rAlyCQLg_5nZwtwAAAIA"]
[Thu Sep 03 03:45:12.967584 2026] [:error] [pid 14235:tid 139687888869120] [client 203.189.153.19:55059] [client 203.189.153.19] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "apkzmF6rAlyCQLg_5nZwuAAAAJU"]
[Thu Sep 03 04:20:43.971257 2026] [:error] [pid 14356:tid 139687897261824] [client 34.50.119.199:48418] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "apk760zbFjoHquTB_ymYEwAAABQ"]
[Thu Sep 03 04:20:45.396842 2026] [:error] [pid 14356:tid 139687872083712] [client 34.50.119.199:48432] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "apk77UzbFjoHquTB_ymYFAAAABc"]
[Thu Sep 03 04:20:46.091299 2026] [:error] [pid 14356:tid 139687880476416] [client 34.50.119.199:48442] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.local"] [unique_id "apk77kzbFjoHquTB_ymYFgAAABY"]
[Thu Sep 03 04:20:46.808808 2026] [:error] [pid 14231:tid 139687981188864] [client 34.50.119.199:48454] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.production"] [unique_id "apk77q_YbNcSuH2GNlTNxQAAAEo"]
[Thu Sep 03 04:20:47.514886 2026] [:error] [pid 14239:tid 139688132331264] [client 34.50.119.199:48462] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.staging"] [unique_id "apk779UIZMka9NNIKm8-HwAAAMA"]
[Thu Sep 03 04:20:48.235525 2026] [:error] [pid 14239:tid 139688014759680] [client 34.50.119.199:48472] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.development"] [unique_id "apk78NUIZMka9NNIKm8-IAAAAMY"]
[Thu Sep 03 04:20:48.940137 2026] [:error] [pid 14235:tid 139688132331264] [client 34.50.119.199:48484] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.test"] [unique_id "apk78F6rAlyCQLg_5nZ29gAAAIA"]
[Thu Sep 03 04:20:49.657587 2026] [:error] [pid 14239:tid 139688123938560] [client 34.50.119.199:48496] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.remote"] [unique_id "apk78dUIZMka9NNIKm8-IQAAAME"]
[Thu Sep 03 04:20:50.352106 2026] [:error] [pid 14239:tid 139688023152384] [client 34.50.119.199:48504] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.bak"] [unique_id "apk78tUIZMka9NNIKm8-IgAAAMU"]
[Thu Sep 03 04:20:51.052165 2026] [:error] [pid 14239:tid 139687930832640] [client 34.50.119.199:48506] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.backup"] [unique_id "apk789UIZMka9NNIKm8-IwAAANA"]
[Thu Sep 03 04:20:51.766307 2026] [:error] [pid 14356:tid 139688039937792] [client 34.50.119.199:48512] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.save"] [unique_id "apk780zbFjoHquTB_ymYGwAAAAM"]
[Thu Sep 03 04:20:52.484435 2026] [:error] [pid 14356:tid 139687888869120] [client 34.50.119.199:48524] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.old"] [unique_id "apk79EzbFjoHquTB_ymYHQAAABU"]
[Thu Sep 03 04:20:53.185883 2026] [:error] [pid 14235:tid 139687880476416] [client 34.50.119.199:44730] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.sample"] [unique_id "apk79V6rAlyCQLg_5nZ2-AAAAJY"]
[Thu Sep 03 04:20:53.905312 2026] [:error] [pid 14239:tid 139687922439936] [client 34.50.119.199:44740] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.example"] [unique_id "apk79dUIZMka9NNIKm8-JQAAANE"]
[Thu Sep 03 04:20:54.613767 2026] [:error] [pid 14235:tid 139687863691008] [client 34.50.119.199:44742] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.dev"] [unique_id "apk79l6rAlyCQLg_5nZ2-wAAAJg"]
[Thu Sep 03 04:20:55.338537 2026] [:error] [pid 14239:tid 139687905654528] [client 34.50.119.199:44744] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.prod"] [unique_id "apk799UIZMka9NNIKm8-KAAAANM"]
[Thu Sep 03 04:20:56.052608 2026] [:error] [pid 14231:tid 139687989581568] [client 34.50.119.199:44756] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.stage"] [unique_id "apk7-K_YbNcSuH2GNlTNxwAAAEk"]
[Thu Sep 03 04:20:56.751555 2026] [:error] [pid 14356:tid 139688132331264] [client 34.50.119.199:44760] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.ci"] [unique_id "apk7-EzbFjoHquTB_ymYIQAAAAA"]
[Thu Sep 03 04:20:57.469560 2026] [:error] [pid 14239:tid 139688014759680] [client 34.50.119.199:44772] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.docker"] [unique_id "apk7-dUIZMka9NNIKm8-LQAAAMY"]
[Thu Sep 03 04:20:58.188065 2026] [:error] [pid 14235:tid 139687914047232] [client 34.50.119.199:44784] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.live"] [unique_id "apk7-l6rAlyCQLg_5nZ3AQAAAJI"]
[Thu Sep 03 04:20:58.900718 2026] [:error] [pid 14239:tid 139688031545088] [client 34.50.119.199:44796] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.preprod"] [unique_id "apk7-tUIZMka9NNIKm8-LwAAAMQ"]
[Thu Sep 03 04:20:59.625570 2026] [:error] [pid 14356:tid 139688031545088] [client 34.50.119.199:44808] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.uat"] [unique_id "apk7-0zbFjoHquTB_ymYIwAAAAQ"]
[Thu Sep 03 04:21:00.323690 2026] [:error] [pid 14356:tid 139688123938560] [client 34.50.119.199:44810] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.dist"] [unique_id "apk7_EzbFjoHquTB_ymYJAAAAAE"]
[Thu Sep 03 04:21:01.031552 2026] [:error] [pid 14231:tid 139687939225344] [client 34.50.119.199:44824] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.swp"] [unique_id "apk7_a_YbNcSuH2GNlTNyQAAAE8"]
[Thu Sep 03 04:21:01.744956 2026] [:error] [pid 14239:tid 139687880476416] [client 34.50.119.199:44834] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env~"] [unique_id "apk7_dUIZMka9NNIKm8-MwAAANY"]
[Thu Sep 03 04:21:02.456339 2026] [:error] [pid 14356:tid 139687930832640] [client 34.50.119.199:44850] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env1"] [unique_id "apk7_kzbFjoHquTB_ymYJwAAABA"]
[Thu Sep 03 04:21:03.179350 2026] [:error] [pid 14235:tid 139687872083712] [client 34.50.119.199:37418] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env2"] [unique_id "apk7_16rAlyCQLg_5nZ3AgAAAJc"]
[Thu Sep 03 04:21:03.888328 2026] [:error] [pid 14239:tid 139688115545856] [client 34.50.119.199:37434] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env_copy"] [unique_id "apk7_9UIZMka9NNIKm8-NQAAAMI"]
[Thu Sep 03 04:21:04.599141 2026] [:error] [pid 14239:tid 139688023152384] [client 34.50.119.199:37450] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.txt"] [unique_id "apk8ANUIZMka9NNIKm8-NwAAAMU"]
[Thu Sep 03 04:21:05.293958 2026] [:error] [pid 14239:tid 139687981188864] [client 34.50.119.199:37460] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.json"] [unique_id "apk8AdUIZMka9NNIKm8-OAAAAMo"]
[Thu Sep 03 04:21:06.008314 2026] [:error] [pid 14356:tid 139687914047232] [client 34.50.119.199:37472] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.yaml"] [unique_id "apk8AkzbFjoHquTB_ymYKwAAABI"]
[Thu Sep 03 04:21:06.728163 2026] [:error] [pid 14356:tid 139687905654528] [client 34.50.119.199:37474] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.yml"] [unique_id "apk8AkzbFjoHquTB_ymYLQAAABM"]
[Thu Sep 03 04:21:07.446061 2026] [:error] [pid 14356:tid 139688023152384] [client 34.50.119.199:37478] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/app/.env"] [unique_id "apk8A0zbFjoHquTB_ymYMQAAAAU"]
[Thu Sep 03 04:21:08.154551 2026] [:error] [pid 14231:tid 139688132331264] [client 34.50.119.199:37480] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/apps/.env"] [unique_id "apk8BK_YbNcSuH2GNlTNywAAAEA"]
[Thu Sep 03 04:21:08.860289 2026] [:error] [pid 14239:tid 139687947618048] [client 34.50.119.199:37492] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/.env"] [unique_id "apk8BNUIZMka9NNIKm8-OgAAAM4"]
[Thu Sep 03 04:21:09.577994 2026] [:error] [pid 14231:tid 139687964403456] [client 34.50.119.199:37502] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/web/.env"] [unique_id "apk8Ba_YbNcSuH2GNlTNzAAAAEw"]
[Thu Sep 03 04:21:10.312953 2026] [:error] [pid 14235:tid 139687939225344] [client 34.50.119.199:37514] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/site/.env"] [unique_id "apk8Bl6rAlyCQLg_5nZ3BgAAAI8"]
[Thu Sep 03 04:21:11.011867 2026] [:error] [pid 14356:tid 139687956010752] [client 34.50.119.199:37530] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/public/.env"] [unique_id "apk8B0zbFjoHquTB_ymYMwAAAA0"]
[Thu Sep 03 04:21:11.726852 2026] [:error] [pid 14356:tid 139687930832640] [client 34.50.119.199:37538] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/admin/.env"] [unique_id "apk8B0zbFjoHquTB_ymYNQAAABA"]
[Thu Sep 03 04:21:12.432512 2026] [:error] [pid 14356:tid 139687872083712] [client 34.50.119.199:37550] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/backend/.env"] [unique_id "apk8CEzbFjoHquTB_ymYNwAAABc"]
[Thu Sep 03 04:21:13.141484 2026] [:error] [pid 14231:tid 139687905654528] [client 34.50.119.199:54194] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/server/.env"] [unique_id "apk8Ca_YbNcSuH2GNlTNzgAAAFM"]
[Thu Sep 03 04:21:13.854083 2026] [:error] [pid 14231:tid 139688115545856] [client 34.50.119.199:54200] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/frontend/.env"] [unique_id "apk8Ca_YbNcSuH2GNlTNzwAAAEI"]
[Thu Sep 03 04:21:14.566691 2026] [:error] [pid 14356:tid 139687905654528] [client 34.50.119.199:54204] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/src/.env"] [unique_id "apk8CkzbFjoHquTB_ymYOgAAABM"]
[Thu Sep 03 04:21:15.286332 2026] [:error] [pid 14235:tid 139687930832640] [client 34.50.119.199:54218] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/core/.env"] [unique_id "apk8C16rAlyCQLg_5nZ3CAAAAJA"]
[Thu Sep 03 04:21:15.994232 2026] [:error] [pid 14356:tid 139688023152384] [client 34.50.119.199:54228] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/core/app/.env"] [unique_id "apk8C0zbFjoHquTB_ymYOwAAAAU"]
[Thu Sep 03 04:21:16.712409 2026] [:error] [pid 14239:tid 139687897261824] [client 34.50.119.199:54234] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/config/.env"] [unique_id "apk8DNUIZMka9NNIKm8-PQAAANQ"]
[Thu Sep 03 04:21:17.418439 2026] [:error] [pid 14239:tid 139688132331264] [client 34.50.119.199:54248] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/private/.env"] [unique_id "apk8DdUIZMka9NNIKm8-PwAAAMA"]
[Thu Sep 03 04:21:18.138325 2026] [:error] [pid 14239:tid 139688123938560] [client 34.50.119.199:54254] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/application/.env"] [unique_id "apk8DtUIZMka9NNIKm8-QAAAAME"]
[Thu Sep 03 04:21:18.858202 2026] [:error] [pid 14356:tid 139688014759680] [client 34.50.119.199:54266] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/bootstrap/.env"] [unique_id "apk8DkzbFjoHquTB_ymYPgAAAAY"]
[Thu Sep 03 04:21:19.581211 2026] [:error] [pid 14356:tid 139687956010752] [client 34.50.119.199:54282] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/database/.env"] [unique_id "apk8D0zbFjoHquTB_ymYQAAAAA0"]
[Thu Sep 03 04:21:20.278861 2026] [:error] [pid 14235:tid 139688023152384] [client 34.50.119.199:54284] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/storage/.env"] [unique_id "apk8EF6rAlyCQLg_5nZ3CQAAAIU"]
[Thu Sep 03 04:21:20.978713 2026] [:error] [pid 14235:tid 139687956010752] [client 34.50.119.199:54286] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/var/www/.env"] [unique_id "apk8EF6rAlyCQLg_5nZ3DAAAAI0"]
[Thu Sep 03 04:21:21.674860 2026] [:error] [pid 14239:tid 139687922439936] [client 34.50.119.199:54294] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/var/www/html/.env"] [unique_id "apk8EdUIZMka9NNIKm8-RAAAANE"]
[Thu Sep 03 04:21:22.389293 2026] [:error] [pid 14231:tid 139688123938560] [client 34.50.119.199:54308] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/current/.env"] [unique_id "apk8Eq_YbNcSuH2GNlTN1gAAAEE"]
[Thu Sep 03 04:21:23.108715 2026] [:error] [pid 14356:tid 139687905654528] [client 34.50.119.199:44872] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/release/.env"] [unique_id "apk8E0zbFjoHquTB_ymYRgAAABM"]
[Thu Sep 03 04:21:23.816331 2026] [:error] [pid 14239:tid 139687880476416] [client 34.50.119.199:44886] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/releases/.env"] [unique_id "apk8E9UIZMka9NNIKm8-RwAAANY"]
[Thu Sep 03 04:21:24.524869 2026] [:error] [pid 14235:tid 139687922439936] [client 34.50.119.199:44888] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/shared/.env"] [unique_id "apk8FF6rAlyCQLg_5nZ3EgAAAJE"]
[Thu Sep 03 04:21:25.228998 2026] [:error] [pid 14356:tid 139687989581568] [client 34.50.119.199:44904] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/deploy/.env"] [unique_id "apk8FUzbFjoHquTB_ymYSgAAAAk"]
[Thu Sep 03 04:21:25.955057 2026] [:error] [pid 14239:tid 139688014759680] [client 34.50.119.199:44916] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/build/.env"] [unique_id "apk8FdUIZMka9NNIKm8-SwAAAMY"]
[Thu Sep 03 04:21:26.672076 2026] [:error] [pid 14239:tid 139688115545856] [client 34.50.119.199:44918] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/dist/.env"] [unique_id "apk8FtUIZMka9NNIKm8-TAAAAMI"]
[Thu Sep 03 04:21:27.395102 2026] [:error] [pid 14239:tid 139688031545088] [client 34.50.119.199:44928] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/public_html/.env"] [unique_id "apk8F9UIZMka9NNIKm8-TgAAAMQ"]
[Thu Sep 03 04:21:28.102389 2026] [:error] [pid 14239:tid 139687972796160] [client 34.50.119.199:44942] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/htdocs/.env"] [unique_id "apk8GNUIZMka9NNIKm8-TwAAAMs"]
[Thu Sep 03 04:21:28.814781 2026] [:error] [pid 14239:tid 139687939225344] [client 34.50.119.199:44958] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/www/.env"] [unique_id "apk8GNUIZMka9NNIKm8-UQAAAM8"]
[Thu Sep 03 04:21:29.537438 2026] [:error] [pid 14356:tid 139687922439936] [client 34.50.119.199:44962] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/html/.env"] [unique_id "apk8GUzbFjoHquTB_ymYTAAAABE"]
[Thu Sep 03 04:21:30.260385 2026] [:error] [pid 14356:tid 139687947618048] [client 34.50.119.199:44968] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/live/.env"] [unique_id "apk8GkzbFjoHquTB_ymYTQAAAA4"]
[Thu Sep 03 04:21:30.984079 2026] [:error] [pid 14235:tid 139688123938560] [client 34.50.119.199:44978] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/prod/.env"] [unique_id "apk8Gl6rAlyCQLg_5nZ3EwAAAIE"]
[Thu Sep 03 04:21:31.682964 2026] [:error] [pid 14235:tid 139687930832640] [client 34.50.119.199:44990] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/dev/.env"] [unique_id "apk8G16rAlyCQLg_5nZ3FAAAAJA"]
[Thu Sep 03 04:21:32.393997 2026] [:error] [pid 14235:tid 139688039937792] [client 34.50.119.199:45004] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/staging/.env"] [unique_id "apk8HF6rAlyCQLg_5nZ3FgAAAIM"]
[Thu Sep 03 04:21:33.139462 2026] [:error] [pid 14356:tid 139688023152384] [client 34.50.119.199:44238] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/opt/.env"] [unique_id "apk8HUzbFjoHquTB_ymYUgAAAAU"]
[Thu Sep 03 04:21:33.850112 2026] [:error] [pid 14235:tid 139688115545856] [client 34.50.119.199:44254] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/laravel/.env"] [unique_id "apk8HV6rAlyCQLg_5nZ3FwAAAII"]
[Thu Sep 03 04:21:34.560239 2026] [:error] [pid 14356:tid 139688014759680] [client 34.50.119.199:44256] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/symfony/.env"] [unique_id "apk8HkzbFjoHquTB_ymYVAAAAAY"]
[Thu Sep 03 04:21:35.266619 2026] [:error] [pid 14235:tid 139687914047232] [client 34.50.119.199:44262] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wordpress/.env"] [unique_id "apk8H16rAlyCQLg_5nZ3GAAAAJI"]
[Thu Sep 03 04:21:35.982934 2026] [:error] [pid 14235:tid 139688132331264] [client 34.50.119.199:44272] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wp/.env"] [unique_id "apk8H16rAlyCQLg_5nZ3GQAAAIA"]
[Thu Sep 03 04:21:36.705516 2026] [:error] [pid 14235:tid 139687989581568] [client 34.50.119.199:44288] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cms/.env"] [unique_id "apk8IF6rAlyCQLg_5nZ3GgAAAIk"]
[Thu Sep 03 04:21:37.413996 2026] [:error] [pid 14235:tid 139688031545088] [client 34.50.119.199:44290] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/drupal/.env"] [unique_id "apk8IV6rAlyCQLg_5nZ3HAAAAIQ"]
[Thu Sep 03 04:21:38.131300 2026] [:error] [pid 14239:tid 139687997974272] [client 34.50.119.199:44296] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/joomla/.env"] [unique_id "apk8ItUIZMka9NNIKm8-VAAAAMg"]
[Thu Sep 03 04:21:38.835804 2026] [:error] [pid 14356:tid 139687914047232] [client 34.50.119.199:44308] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/magento/.env"] [unique_id "apk8IkzbFjoHquTB_ymYWwAAABI"]
[Thu Sep 03 04:21:39.565457 2026] [:error] [pid 14239:tid 139687989581568] [client 34.50.119.199:44324] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/shopify/.env"] [unique_id "apk8I9UIZMka9NNIKm8-VgAAAMk"]
[Thu Sep 03 04:21:40.301476 2026] [:error] [pid 14356:tid 139688023152384] [client 34.50.119.199:44330] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/prestashop/.env"] [unique_id "apk8JEzbFjoHquTB_ymYXQAAAAU"]
[Thu Sep 03 04:21:41.026192 2026] [:error] [pid 14231:tid 139687964403456] [client 34.50.119.199:44332] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/codeigniter/.env"] [unique_id "apk8Ja_YbNcSuH2GNlTN2AAAAEw"]
[Thu Sep 03 04:21:41.740519 2026] [:error] [pid 14239:tid 139688031545088] [client 34.50.119.199:44336] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cakephp/.env"] [unique_id "apk8JdUIZMka9NNIKm8-WgAAAMQ"]
[Thu Sep 03 04:21:42.441105 2026] [:error] [pid 14356:tid 139688006366976] [client 34.50.119.199:44340] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/zend/.env"] [unique_id "apk8JkzbFjoHquTB_ymYXwAAAAc"]
[Thu Sep 03 04:21:43.149157 2026] [:error] [pid 14235:tid 139687863691008] [client 34.50.119.199:43286] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/yii/.env"] [unique_id "apk8J16rAlyCQLg_5nZ3HwAAAJg"]
[Thu Sep 03 04:21:43.856389 2026] [:error] [pid 14235:tid 139688006366976] [client 34.50.119.199:43292] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/laravel5/.env"] [unique_id "apk8J16rAlyCQLg_5nZ3IAAAAIc"]
[Thu Sep 03 04:21:44.563491 2026] [:error] [pid 14239:tid 139687922439936] [client 34.50.119.199:43294] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/v1/.env"] [unique_id "apk8KNUIZMka9NNIKm8-WwAAANE"]
[Thu Sep 03 04:21:45.266993 2026] [:error] [pid 14231:tid 139687905654528] [client 34.50.119.199:43310] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/v2/.env"] [unique_id "apk8Ka_YbNcSuH2GNlTN2QAAAFM"]
[Thu Sep 03 04:21:45.981872 2026] [:error] [pid 14231:tid 139688115545856] [client 34.50.119.199:43326] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/v3/.env"] [unique_id "apk8Ka_YbNcSuH2GNlTN2gAAAEI"]
[Thu Sep 03 04:21:46.695941 2026] [:error] [pid 14356:tid 139687964403456] [client 34.50.119.199:43332] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/v1/.env"] [unique_id "apk8KkzbFjoHquTB_ymYYgAAAAw"]
[Thu Sep 03 04:21:47.412037 2026] [:error] [pid 14239:tid 139687905654528] [client 34.50.119.199:43334] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/v2/.env"] [unique_id "apk8K9UIZMka9NNIKm8-XgAAANM"]
[Thu Sep 03 04:21:48.129702 2026] [:error] [pid 14356:tid 139687922439936] [client 34.50.119.199:43346] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/rest/.env"] [unique_id "apk8LEzbFjoHquTB_ymYZgAAABE"]
[Thu Sep 03 04:21:48.840794 2026] [:error] [pid 14235:tid 139688039937792] [client 34.50.119.199:43358] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/graphql/.env"] [unique_id "apk8LF6rAlyCQLg_5nZ3IwAAAIM"]
[Thu Sep 03 04:21:49.554731 2026] [:error] [pid 14231:tid 139687930832640] [client 34.50.119.199:43374] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/gateway/.env"] [unique_id "apk8La_YbNcSuH2GNlTN3QAAAFA"]
[Thu Sep 03 04:21:50.252381 2026] [:error] [pid 14235:tid 139688132331264] [client 34.50.119.199:43378] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/microservice/.env"] [unique_id "apk8Ll6rAlyCQLg_5nZ3JQAAAIA"]
[Thu Sep 03 04:21:50.951400 2026] [:error] [pid 14356:tid 139688115545856] [client 34.50.119.199:43386] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/service/.env"] [unique_id "apk8LkzbFjoHquTB_ymYaAAAAAI"]
[Thu Sep 03 04:21:51.669927 2026] [:error] [pid 14356:tid 139687905654528] [client 34.50.119.199:43400] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/v3/.env"] [unique_id "apk8L0zbFjoHquTB_ymYaQAAABM"]
[Thu Sep 03 04:21:52.379421 2026] [:error] [pid 14239:tid 139687863691008] [client 34.50.119.199:43416] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/dev/.env"] [unique_id "apk8MNUIZMka9NNIKm8-XwAAANg"]
[Thu Sep 03 04:21:53.096361 2026] [:error] [pid 14356:tid 139687888869120] [client 34.50.119.199:47328] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/staging/.env"] [unique_id "apk8MUzbFjoHquTB_ymYagAAABU"]
[Thu Sep 03 04:21:53.800723 2026] [:error] [pid 14235:tid 139687888869120] [client 34.50.119.199:47334] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/vendor/.env"] [unique_id "apk8MV6rAlyCQLg_5nZ3JwAAAJU"]
[Thu Sep 03 04:21:54.503749 2026] [:error] [pid 14235:tid 139687922439936] [client 34.50.119.199:47346] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/lib/.env"] [unique_id "apk8Ml6rAlyCQLg_5nZ3KgAAAJE"]
[Thu Sep 03 04:21:55.237430 2026] [:error] [pid 14356:tid 139688123938560] [client 34.50.119.199:47360] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/resources/.env"] [unique_id "apk8M0zbFjoHquTB_ymYawAAAAE"]
[Thu Sep 03 04:21:55.946975 2026] [:error] [pid 14235:tid 139688014759680] [client 34.50.119.199:47364] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/assets/.env"] [unique_id "apk8M16rAlyCQLg_5nZ3LgAAAIY"]
[Thu Sep 03 04:21:56.662083 2026] [:error] [pid 14235:tid 139687956010752] [client 34.50.119.199:47380] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/uploads/.env"] [unique_id "apk8NF6rAlyCQLg_5nZ3LwAAAI0"]
[Thu Sep 03 04:21:57.383993 2026] [:error] [pid 14231:tid 139688039937792] [client 34.50.119.199:47382] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/internal/.env"] [unique_id "apk8Na_YbNcSuH2GNlTN3wAAAEM"]
[Thu Sep 03 04:21:58.111689 2026] [:error] [pid 14239:tid 139687930832640] [client 34.50.119.199:47394] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/tools/.env"] [unique_id "apk8NtUIZMka9NNIKm8-ZQAAANA"]
[Thu Sep 03 04:21:58.835778 2026] [:error] [pid 14231:tid 139687888869120] [client 34.50.119.199:47408] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/scripts/.env"] [unique_id "apk8Nq_YbNcSuH2GNlTN4QAAAFU"]
[Thu Sep 03 04:21:59.563188 2026] [:error] [pid 14356:tid 139687956010752] [client 34.50.119.199:47416] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/bin/.env"] [unique_id "apk8N0zbFjoHquTB_ymYcAAAAA0"]
[Thu Sep 03 04:22:00.268921 2026] [:error] [pid 14235:tid 139688132331264] [client 34.50.119.199:47418] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sbin/.env"] [unique_id "apk8OF6rAlyCQLg_5nZ3MAAAAIA"]
[Thu Sep 03 04:22:00.991323 2026] [:error] [pid 14356:tid 139687880476416] [client 34.50.119.199:47424] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/local/.env"] [unique_id "apk8OEzbFjoHquTB_ymYcgAAABY"]
[Thu Sep 03 04:22:01.697805 2026] [:error] [pid 14235:tid 139687989581568] [client 34.50.119.199:47434] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/portal/.env"] [unique_id "apk8OV6rAlyCQLg_5nZ3MQAAAIk"]
[Thu Sep 03 04:22:02.411411 2026] [:error] [pid 14235:tid 139688031545088] [client 34.50.119.199:47448] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/dashboard/.env"] [unique_id "apk8Ol6rAlyCQLg_5nZ3MgAAAIQ"]
[Thu Sep 03 04:22:03.129719 2026] [:error] [pid 14235:tid 139687939225344] [client 34.50.119.199:45292] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/panel/.env"] [unique_id "apk8O16rAlyCQLg_5nZ3MwAAAI8"]
[Thu Sep 03 04:22:03.827870 2026] [:error] [pid 14356:tid 139688023152384] [client 34.50.119.199:45296] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/crm/.env"] [unique_id "apk8O0zbFjoHquTB_ymYdQAAAAU"]
[Thu Sep 03 04:22:04.538032 2026] [:error] [pid 14239:tid 139687956010752] [client 34.50.119.199:45304] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/erp/.env"] [unique_id "apk8PNUIZMka9NNIKm8-awAAAM0"]
[Thu Sep 03 04:22:05.241217 2026] [:error] [pid 14235:tid 139687997974272] [client 34.50.119.199:45316] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/shop/.env"] [unique_id "apk8PV6rAlyCQLg_5nZ3NAAAAIg"]
[Thu Sep 03 04:22:05.961108 2026] [:error] [pid 14231:tid 139687997974272] [client 34.50.119.199:45328] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/store/.env"] [unique_id "apk8Pa_YbNcSuH2GNlTN6gAAAEg"]
[Thu Sep 03 04:22:06.673737 2026] [:error] [pid 14239:tid 139687997974272] [client 34.50.119.199:45336] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/saas/.env"] [unique_id "apk8PtUIZMka9NNIKm8-bQAAAMg"]
[Thu Sep 03 04:22:07.379772 2026] [:error] [pid 14235:tid 139688123938560] [client 34.50.119.199:45350] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/client/.env"] [unique_id "apk8P16rAlyCQLg_5nZ3NwAAAIE"]
[Thu Sep 03 04:22:08.106140 2026] [:error] [pid 14239:tid 139687872083712] [client 34.50.119.199:45360] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/project/.env"] [unique_id "apk8QNUIZMka9NNIKm8-bwAAANc"]
[Thu Sep 03 04:22:08.814764 2026] [:error] [pid 14356:tid 139687947618048] [client 34.50.119.199:45376] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/admin-panel/.env"] [unique_id "apk8QEzbFjoHquTB_ymYfAAAAA4"]
[Thu Sep 03 04:22:09.534960 2026] [:error] [pid 14356:tid 139688132331264] [client 34.50.119.199:45384] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/control-panel/.env"] [unique_id "apk8QUzbFjoHquTB_ymYfQAAAAA"]
[Thu Sep 03 04:22:10.256047 2026] [:error] [pid 14356:tid 139687914047232] [client 34.50.119.199:45392] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/user-panel/.env"] [unique_id "apk8QkzbFjoHquTB_ymYfgAAABI"]
[Thu Sep 03 04:22:10.967482 2026] [:error] [pid 14239:tid 139688023152384] [client 34.50.119.199:45394] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/node/.env"] [unique_id "apk8QtUIZMka9NNIKm8-cgAAAMU"]
[Thu Sep 03 04:22:11.692974 2026] [:error] [pid 14356:tid 139687939225344] [client 34.50.119.199:45404] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/express/.env"] [unique_id "apk8Q0zbFjoHquTB_ymYfwAAAA8"]
[Thu Sep 03 04:22:12.405806 2026] [:error] [pid 14231:tid 139687897261824] [client 34.50.119.199:45406] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/next/.env"] [unique_id "apk8RK_YbNcSuH2GNlTN7AAAAFQ"]
[Thu Sep 03 04:22:13.112394 2026] [:error] [pid 14235:tid 139688039937792] [client 34.50.119.199:34108] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/nuxt/.env"] [unique_id "apk8RV6rAlyCQLg_5nZ3PAAAAIM"]
[Thu Sep 03 04:22:13.823359 2026] [:error] [pid 14235:tid 139687888869120] [client 34.50.119.199:34112] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/nest/.env"] [unique_id "apk8RV6rAlyCQLg_5nZ3QAAAAJU"]
[Thu Sep 03 04:22:14.520579 2026] [:error] [pid 14239:tid 139687964403456] [client 34.50.119.199:34114] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/react/.env"] [unique_id "apk8RtUIZMka9NNIKm8-fAAAAMw"]
[Thu Sep 03 04:22:15.223838 2026] [:error] [pid 14235:tid 139687989581568] [client 34.50.119.199:34118] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/vue/.env"] [unique_id "apk8R16rAlyCQLg_5nZ3SgAAAIk"]
[Thu Sep 03 04:22:15.947183 2026] [:error] [pid 14356:tid 139687872083712] [client 34.50.119.199:34128] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/angular/.env"] [unique_id "apk8R0zbFjoHquTB_ymYkAAAABc"]
[Thu Sep 03 04:22:16.663301 2026] [:error] [pid 14356:tid 139687922439936] [client 34.50.119.199:34130] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/svelte/.env"] [unique_id "apk8SEzbFjoHquTB_ymYkgAAABE"]
[Thu Sep 03 04:22:17.396739 2026] [:error] [pid 14231:tid 139687914047232] [client 34.50.119.199:34140] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/vite/.env"] [unique_id "apk8Sa_YbNcSuH2GNlTN8gAAAFI"]
[Thu Sep 03 04:22:18.124300 2026] [:error] [pid 14356:tid 139687930832640] [client 34.50.119.199:34156] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/backup/.env"] [unique_id "apk8SkzbFjoHquTB_ymYlQAAABA"]
[Thu Sep 03 04:22:18.831070 2026] [:error] [pid 14235:tid 139687947618048] [client 34.50.119.199:34164] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/backups/.env"] [unique_id "apk8Sl6rAlyCQLg_5nZ3TQAAAI4"]
[Thu Sep 03 04:22:19.538010 2026] [:error] [pid 14231:tid 139688014759680] [client 34.50.119.199:34180] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/old/.env"] [unique_id "apk8S6_YbNcSuH2GNlTN9gAAAEY"]
[Thu Sep 03 04:22:20.267110 2026] [:error] [pid 14239:tid 139687897261824] [client 34.50.119.199:34196] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/tmp/.env"] [unique_id "apk8TNUIZMka9NNIKm8-hgAAANQ"]
[Thu Sep 03 04:22:20.973440 2026] [:error] [pid 14239:tid 139688123938560] [client 34.50.119.199:34200] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/temp/.env"] [unique_id "apk8TNUIZMka9NNIKm8-hwAAAME"]
[Thu Sep 03 04:22:21.695816 2026] [:error] [pid 14235:tid 139687880476416] [client 34.50.119.199:34206] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/lab/.env"] [unique_id "apk8TV6rAlyCQLg_5nZ3TwAAAJY"]
[Thu Sep 03 04:22:22.402154 2026] [:error] [pid 14239:tid 139687989581568] [client 34.50.119.199:34216] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cronlab/.env"] [unique_id "apk8TtUIZMka9NNIKm8-iAAAAMk"]
[Thu Sep 03 04:22:23.115164 2026] [:error] [pid 14356:tid 139687964403456] [client 34.50.119.199:35154] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cron/.env"] [unique_id "apk8T0zbFjoHquTB_ymYmwAAAAw"]
[Thu Sep 03 04:22:23.821975 2026] [:error] [pid 14356:tid 139687947618048] [client 34.50.119.199:35160] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/en/.env"] [unique_id "apk8T0zbFjoHquTB_ymYnQAAAA4"]
[Thu Sep 03 04:22:24.541277 2026] [:error] [pid 14356:tid 139687997974272] [client 34.50.119.199:35170] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/administrator/.env"] [unique_id "apk8UEzbFjoHquTB_ymYngAAAAg"]
[Thu Sep 03 04:22:25.249654 2026] [:error] [pid 14235:tid 139687863691008] [client 34.50.119.199:35176] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/psnlink/.env"] [unique_id "apk8UV6rAlyCQLg_5nZ3UgAAAJg"]
[Thu Sep 03 04:22:25.970797 2026] [:error] [pid 14231:tid 139687897261824] [client 34.50.119.199:35180] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/exapi/.env"] [unique_id "apk8Ua_YbNcSuH2GNlTN-QAAAFQ"]
[Thu Sep 03 04:22:26.688079 2026] [:error] [pid 14231:tid 139687872083712] [client 34.50.119.199:35188] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sitemaps/.env"] [unique_id "apk8Uq_YbNcSuH2GNlTN-wAAAFc"]
[Thu Sep 03 04:22:27.406988 2026] [:error] [pid 14231:tid 139687972796160] [client 34.50.119.199:35190] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.backup1"] [unique_id "apk8U6_YbNcSuH2GNlTN_AAAAEs"]
[Thu Sep 03 04:22:28.121833 2026] [:error] [pid 14239:tid 139687914047232] [client 34.50.119.199:35200] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.backup2"] [unique_id "apk8VNUIZMka9NNIKm8-kQAAANI"]
[Thu Sep 03 04:22:28.819255 2026] [:error] [pid 14356:tid 139687956010752] [client 34.50.119.199:35204] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/logs/.env"] [unique_id "apk8VEzbFjoHquTB_ymYoAAAAA0"]
[Thu Sep 03 04:22:29.518412 2026] [:error] [pid 14239:tid 139687997974272] [client 34.50.119.199:35214] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cache/.env"] [unique_id "apk8VdUIZMka9NNIKm8-kgAAAMg"]
[Thu Sep 03 04:22:30.220287 2026] [:error] [pid 14231:tid 139687880476416] [client 34.50.119.199:35222] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mailer/.env"] [unique_id "apk8Vq_YbNcSuH2GNlTN_QAAAFY"]
[Thu Sep 03 04:22:30.919221 2026] [:error] [pid 14356:tid 139687939225344] [client 34.50.119.199:35226] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mail/.env"] [unique_id "apk8VkzbFjoHquTB_ymYowAAAA8"]
[Thu Sep 03 04:22:31.628361 2026] [:error] [pid 14356:tid 139688123938560] [client 34.50.119.199:35240] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/email/.env"] [unique_id "apk8V0zbFjoHquTB_ymYpgAAAAE"]
[Thu Sep 03 04:22:32.329862 2026] [:error] [pid 14231:tid 139687905654528] [client 34.50.119.199:35250] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/smtp/.env"] [unique_id "apk8WK_YbNcSuH2GNlTOAAAAAFM"]
[Thu Sep 03 04:22:33.024275 2026] [:error] [pid 14231:tid 139687997974272] [client 34.50.119.199:32896] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mailing/.env"] [unique_id "apk8Wa_YbNcSuH2GNlTOAgAAAEg"]
[Thu Sep 03 04:22:33.735237 2026] [:error] [pid 14356:tid 139687989581568] [client 34.50.119.199:32902] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/notifications/.env"] [unique_id "apk8WUzbFjoHquTB_ymYqAAAAAk"]
[Thu Sep 03 04:22:34.435476 2026] [:error] [pid 14239:tid 139687880476416] [client 34.50.119.199:32912] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/notify/.env"] [unique_id "apk8WtUIZMka9NNIKm8-mAAAANY"]
[Thu Sep 03 04:22:35.140966 2026] [:error] [pid 14231:tid 139688031545088] [client 34.50.119.199:32918] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sender/.env"] [unique_id "apk8W6_YbNcSuH2GNlTOAwAAAEQ"]
[Thu Sep 03 04:22:35.852536 2026] [:error] [pid 14231:tid 139687897261824] [client 34.50.119.199:32932] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/campaign/.env"] [unique_id "apk8W6_YbNcSuH2GNlTOBAAAAFQ"]
[Thu Sep 03 04:22:36.602239 2026] [:error] [pid 14239:tid 139687956010752] [client 34.50.119.199:32940] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/newsletter/.env"] [unique_id "apk8XNUIZMka9NNIKm8-mgAAAM0"]
[Thu Sep 03 04:22:37.356070 2026] [:error] [pid 14235:tid 139688039937792] [client 34.50.119.199:32946] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/ses/.env"] [unique_id "apk8XV6rAlyCQLg_5nZ3VAAAAIM"]
[Thu Sep 03 04:22:38.128013 2026] [:error] [pid 14239:tid 139688115545856] [client 34.50.119.199:32948] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sendgrid/.env"] [unique_id "apk8XtUIZMka9NNIKm8-ngAAAMI"]
[Thu Sep 03 04:22:38.837584 2026] [:error] [pid 14356:tid 139688132331264] [client 34.50.119.199:32952] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sparkpost/.env"] [unique_id "apk8XkzbFjoHquTB_ymYrAAAAAA"]
[Thu Sep 03 04:22:39.580915 2026] [:error] [pid 14231:tid 139688132331264] [client 34.50.119.199:32960] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/postmark/.env"] [unique_id "apk8X6_YbNcSuH2GNlTOCAAAAEA"]
[Thu Sep 03 04:22:40.469553 2026] [:error] [pid 14231:tid 139687914047232] [client 34.50.119.199:32972] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mailgun/.env"] [unique_id "apk8YK_YbNcSuH2GNlTOCQAAAFI"]
[Thu Sep 03 04:22:41.217529 2026] [:error] [pid 14239:tid 139688132331264] [client 34.50.119.199:32978] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mandrill/.env"] [unique_id "apk8YdUIZMka9NNIKm8-oAAAAMA"]
[Thu Sep 03 04:22:41.942671 2026] [:error] [pid 14356:tid 139687939225344] [client 34.50.119.199:32992] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mailjet/.env"] [unique_id "apk8YUzbFjoHquTB_ymYrwAAAA8"]
[Thu Sep 03 04:22:42.689711 2026] [:error] [pid 14239:tid 139687964403456] [client 34.50.119.199:33004] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/brevo/.env"] [unique_id "apk8YtUIZMka9NNIKm8-oQAAAMw"]
[Thu Sep 03 04:22:43.465320 2026] [:error] [pid 14235:tid 139687872083712] [client 34.50.119.199:43184] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/transactional/.env"] [unique_id "apk8Y16rAlyCQLg_5nZ3VgAAAJc"]
[Thu Sep 03 04:22:44.247206 2026] [:error] [pid 14239:tid 139688014759680] [client 34.50.119.199:43200] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/bulk/.env"] [unique_id "apk8ZNUIZMka9NNIKm8-ogAAAMY"]
[Thu Sep 03 04:22:44.998182 2026] [:error] [pid 14239:tid 139688031545088] [client 34.50.119.199:43206] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/aws/.env"] [unique_id "apk8ZNUIZMka9NNIKm8-owAAAMQ"]
[Thu Sep 03 04:22:45.772274 2026] [:error] [pid 14235:tid 139688031545088] [client 34.50.119.199:43218] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/azure/.env"] [unique_id "apk8ZV6rAlyCQLg_5nZ3WAAAAIQ"]
[Thu Sep 03 04:22:46.499606 2026] [:error] [pid 14356:tid 139687863691008] [client 34.50.119.199:43230] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/gcp/.env"] [unique_id "apk8ZkzbFjoHquTB_ymYsQAAABg"]
[Thu Sep 03 04:22:47.244326 2026] [:error] [pid 14239:tid 139687888869120] [client 34.50.119.199:43236] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cloud/.env"] [unique_id "apk8Z9UIZMka9NNIKm8-pgAAANU"]
[Thu Sep 03 04:22:47.982329 2026] [:error] [pid 14239:tid 139687956010752] [client 34.50.119.199:43250] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/infrastructure/.env"] [unique_id "apk8Z9UIZMka9NNIKm8-pwAAAM0"]
[Thu Sep 03 04:22:48.732889 2026] [:error] [pid 14356:tid 139688014759680] [client 34.50.119.199:43258] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/docker/.env"] [unique_id "apk8aEzbFjoHquTB_ymYtAAAAAY"]
[Thu Sep 03 04:22:49.460204 2026] [:error] [pid 14239:tid 139688123938560] [client 34.50.119.199:43272] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/k8s/.env"] [unique_id "apk8adUIZMka9NNIKm8-qgAAAME"]
[Thu Sep 03 04:22:50.203123 2026] [:error] [pid 14356:tid 139687997974272] [client 34.50.119.199:43288] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/kubernetes/.env"] [unique_id "apk8akzbFjoHquTB_ymYuQAAAAg"]
[Thu Sep 03 04:22:50.925073 2026] [:error] [pid 14235:tid 139687964403456] [client 34.50.119.199:43300] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/terraform/.env"] [unique_id "apk8al6rAlyCQLg_5nZ3WQAAAIw"]
[Thu Sep 03 04:22:51.647380 2026] [:error] [pid 14235:tid 139687880476416] [client 34.50.119.199:43308] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/ansible/.env"] [unique_id "apk8a16rAlyCQLg_5nZ3WwAAAJY"]
[Thu Sep 03 04:22:52.385164 2026] [:error] [pid 14239:tid 139687872083712] [client 34.50.119.199:43314] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/.env"] [unique_id "apk8bNUIZMka9NNIKm8-qwAAANc"]
[Thu Sep 03 04:22:53.104249 2026] [:error] [pid 14239:tid 139688006366976] [client 34.50.119.199:47178] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/ci/.env"] [unique_id "apk8bdUIZMka9NNIKm8-rAAAAMc"]
[Thu Sep 03 04:22:53.819115 2026] [:error] [pid 14356:tid 139687905654528] [client 34.50.119.199:47182] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cd/.env"] [unique_id "apk8bUzbFjoHquTB_ymYvgAAABM"]
[Thu Sep 03 04:22:54.532168 2026] [:error] [pid 14239:tid 139687930832640] [client 34.50.119.199:47190] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/jenkins/.env"] [unique_id "apk8btUIZMka9NNIKm8-rwAAANA"]
[Thu Sep 03 04:22:55.241519 2026] [:error] [pid 14356:tid 139688023152384] [client 34.50.119.199:47200] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/gitlab/.env"] [unique_id "apk8b0zbFjoHquTB_ymYvwAAAAU"]
[Thu Sep 03 04:22:55.953099 2026] [:error] [pid 14239:tid 139688031545088] [client 34.50.119.199:47208] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/github/.env"] [unique_id "apk8b9UIZMka9NNIKm8-sAAAAMQ"]
[Thu Sep 03 04:22:56.686051 2026] [:error] [pid 14239:tid 139688023152384] [client 34.50.119.199:47212] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/actions/.env"] [unique_id "apk8cNUIZMka9NNIKm8-sQAAAMU"]
[Thu Sep 03 04:22:57.394607 2026] [:error] [pid 14356:tid 139687981188864] [client 34.50.119.199:47220] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/circleci/.env"] [unique_id "apk8cUzbFjoHquTB_ymYwgAAAAo"]
[Thu Sep 03 04:22:58.113866 2026] [:error] [pid 14356:tid 139688123938560] [client 34.50.119.199:47228] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/travis/.env"] [unique_id "apk8ckzbFjoHquTB_ymYxQAAAAE"]
[Thu Sep 03 04:22:58.830456 2026] [:error] [pid 14356:tid 139687922439936] [client 34.50.119.199:47230] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/buildkite/.env"] [unique_id "apk8ckzbFjoHquTB_ymYxgAAABE"]
[Thu Sep 03 04:22:59.541511 2026] [:error] [pid 14235:tid 139687930832640] [client 34.50.119.199:47242] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mysql/.env"] [unique_id "apk8c16rAlyCQLg_5nZ3XQAAAJA"]
[Thu Sep 03 04:23:00.241493 2026] [:error] [pid 14239:tid 139687956010752] [client 34.50.119.199:47252] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/postgres/.env"] [unique_id "apk8dNUIZMka9NNIKm8-tQAAAM0"]
[Thu Sep 03 04:23:00.948874 2026] [:error] [pid 14356:tid 139687947618048] [client 34.50.119.199:47262] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/mongodb/.env"] [unique_id "apk8dEzbFjoHquTB_ymYywAAAA4"]
[Thu Sep 03 04:23:01.659740 2026] [:error] [pid 14235:tid 139688014759680] [client 34.50.119.199:47276] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/redis/.env"] [unique_id "apk8dV6rAlyCQLg_5nZ3XgAAAIY"]
[Thu Sep 03 04:23:02.358559 2026] [:error] [pid 14231:tid 139687930832640] [client 34.50.119.199:47278] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/elasticsearch/.env"] [unique_id "apk8dq_YbNcSuH2GNlTODAAAAFA"]
[Thu Sep 03 04:23:03.076851 2026] [:error] [pid 14239:tid 139688115545856] [client 34.50.119.199:36210] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/rabbitmq/.env"] [unique_id "apk8d9UIZMka9NNIKm8-tgAAAMI"]
[Thu Sep 03 04:23:03.801036 2026] [:error] [pid 14235:tid 139688006366976] [client 34.50.119.199:36224] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/kafka/.env"] [unique_id "apk8d16rAlyCQLg_5nZ3XwAAAIc"]
[Thu Sep 03 04:23:04.511855 2026] [:error] [pid 14356:tid 139687981188864] [client 34.50.119.199:36232] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/queue/.env"] [unique_id "apk8eEzbFjoHquTB_ymYzwAAAAo"]
[Thu Sep 03 04:23:05.218013 2026] [:error] [pid 14235:tid 139687956010752] [client 34.50.119.199:36236] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/worker/.env"] [unique_id "apk8eV6rAlyCQLg_5nZ3YAAAAI0"]
[Thu Sep 03 04:23:05.915437 2026] [:error] [pid 14231:tid 139687897261824] [client 34.50.119.199:36240] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/job/.env"] [unique_id "apk8ea_YbNcSuH2GNlTOEAAAAFQ"]
[Thu Sep 03 04:23:06.622986 2026] [:error] [pid 14231:tid 139688039937792] [client 34.50.119.199:36244] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/test/.env"] [unique_id "apk8eq_YbNcSuH2GNlTOEQAAAEM"]
[Thu Sep 03 04:23:07.339031 2026] [:error] [pid 14235:tid 139688031545088] [client 34.50.119.199:36258] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/qa/.env"] [unique_id "apk8e16rAlyCQLg_5nZ3ZAAAAIQ"]
[Thu Sep 03 04:23:08.045967 2026] [:error] [pid 14235:tid 139687939225344] [client 34.50.119.199:36272] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/preview/.env"] [unique_id "apk8fF6rAlyCQLg_5nZ3ZQAAAI8"]
[Thu Sep 03 04:23:08.743877 2026] [:error] [pid 14356:tid 139688039937792] [client 34.50.119.199:36276] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/beta/.env"] [unique_id "apk8fEzbFjoHquTB_ymY1QAAAAM"]
[Thu Sep 03 04:23:09.439084 2026] [:error] [pid 14356:tid 139687905654528] [client 34.50.119.199:36292] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/uat/.env"] [unique_id "apk8fUzbFjoHquTB_ymY1gAAABM"]
[Thu Sep 03 04:23:10.162360 2026] [:error] [pid 14356:tid 139688006366976] [client 34.50.119.199:36296] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/stage/.env"] [unique_id "apk8fkzbFjoHquTB_ymY1wAAAAc"]
[Thu Sep 03 04:23:10.871824 2026] [:error] [pid 14231:tid 139687872083712] [client 34.50.119.199:36298] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/development/.env"] [unique_id "apk8fq_YbNcSuH2GNlTOEgAAAFc"]
[Thu Sep 03 04:23:11.579249 2026] [:error] [pid 14356:tid 139687997974272] [client 34.50.119.199:36312] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/production/.env"] [unique_id "apk8f0zbFjoHquTB_ymY2AAAAAg"]
[Thu Sep 03 04:23:12.291689 2026] [:error] [pid 14239:tid 139688132331264] [client 34.50.119.199:36316] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/config/app/.env"] [unique_id "apk8gNUIZMka9NNIKm8-uAAAAMA"]
[Thu Sep 03 04:23:13.025088 2026] [proxy_fcgi:error] [pid 14356:tid 139687872083712] [client 34.50.119.199:54842] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:13.763439 2026] [proxy_fcgi:error] [pid 14239:tid 139688014759680] [client 34.50.119.199:54852] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:14.480845 2026] [proxy_fcgi:error] [pid 14356:tid 139687897261824] [client 34.50.119.199:54854] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:15.185366 2026] [proxy_fcgi:error] [pid 14356:tid 139687880476416] [client 34.50.119.199:54858] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:15.904118 2026] [proxy_fcgi:error] [pid 14231:tid 139687880476416] [client 34.50.119.199:54874] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:16.619991 2026] [proxy_fcgi:error] [pid 14356:tid 139687939225344] [client 34.50.119.199:54886] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:17.328289 2026] [proxy_fcgi:error] [pid 14356:tid 139688014759680] [client 34.50.119.199:54896] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:18.731927 2026] [proxy_fcgi:error] [pid 14235:tid 139687880476416] [client 34.50.119.199:54916] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:19.429624 2026] [proxy_fcgi:error] [pid 14235:tid 139687981188864] [client 34.50.119.199:54924] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:20.133498 2026] [proxy_fcgi:error] [pid 14356:tid 139687989581568] [client 34.50.119.199:54938] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:25.143072 2026] [proxy_fcgi:error] [pid 14356:tid 139687930832640] [client 34.50.119.199:49458] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:25.856467 2026] [proxy_fcgi:error] [pid 14356:tid 139688039937792] [client 34.50.119.199:49466] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:26.578322 2026] [proxy_fcgi:error] [pid 14239:tid 139687981188864] [client 34.50.119.199:49472] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:27.295950 2026] [proxy_fcgi:error] [pid 14239:tid 139687897261824] [client 34.50.119.199:49476] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:28.008151 2026] [proxy_fcgi:error] [pid 14356:tid 139687872083712] [client 34.50.119.199:49486] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:28.732524 2026] [proxy_fcgi:error] [pid 14235:tid 139687930832640] [client 34.50.119.199:49498] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 04:23:30.861669 2026] [:error] [pid 14356:tid 139687880476416] [client 34.50.119.199:49512] [client 34.50.119.199] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/webroot/index.php/_environment"] [unique_id "apk8kkzbFjoHquTB_ymY8gAAABY"]
[Thu Sep 03 04:23:31.572939 2026] [:error] [pid 14239:tid 139688023152384] [client 34.50.119.199:49524] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/mail/phpinfo.php"] [unique_id "apk8k9UIZMka9NNIKm8-yAAAAMU"]
[Thu Sep 03 04:23:32.294725 2026] [:error] [pid 14356:tid 139688115545856] [client 34.50.119.199:49534] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/cpanel/phpinfo.php"] [unique_id "apk8lEzbFjoHquTB_ymY9QAAAAI"]
[Thu Sep 03 04:23:33.017200 2026] [:error] [pid 14356:tid 139688031545088] [client 34.50.119.199:35660] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/hosting/phpinfo.php"] [unique_id "apk8lUzbFjoHquTB_ymY9gAAAAQ"]
[Thu Sep 03 04:23:33.745461 2026] [:error] [pid 14239:tid 139688123938560] [client 34.50.119.199:35668] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/webmail/phpinfo.php"] [unique_id "apk8ldUIZMka9NNIKm8-yQAAAME"]
[Thu Sep 03 04:23:34.477012 2026] [:error] [pid 14231:tid 139687939225344] [client 34.50.119.199:35674] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/smtp/phpinfo.php"] [unique_id "apk8lq_YbNcSuH2GNlTOKAAAAE8"]
[Thu Sep 03 04:23:35.186005 2026] [:error] [pid 14356:tid 139687947618048] [client 34.50.119.199:35690] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo.php.bak"] [unique_id "apk8l0zbFjoHquTB_ymY-AAAAA4"]
[Thu Sep 03 04:23:35.892265 2026] [:error] [pid 14239:tid 139687880476416] [client 34.50.119.199:35696] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo.php.old"] [unique_id "apk8l9UIZMka9NNIKm8-ygAAANY"]
[Thu Sep 03 04:23:36.613906 2026] [:error] [pid 14235:tid 139688132331264] [client 34.50.119.199:35700] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo.php~"] [unique_id "apk8mF6rAlyCQLg_5nZ3cAAAAIA"]
[Thu Sep 03 04:23:37.334276 2026] [:error] [pid 14356:tid 139687872083712] [client 34.50.119.199:35712] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/info.php.bak"] [unique_id "apk8mUzbFjoHquTB_ymY_AAAABc"]
[Thu Sep 03 04:23:38.041176 2026] [:error] [pid 14235:tid 139688031545088] [client 34.50.119.199:35718] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/phpinfo.php.save"] [unique_id "apk8ml6rAlyCQLg_5nZ3cQAAAIQ"]
[Thu Sep 03 04:23:38.745223 2026] [:error] [pid 14239:tid 139687997974272] [client 34.50.119.199:35732] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/staging/phpinfo.php"] [unique_id "apk8mtUIZMka9NNIKm8-0AAAAMg"]
[Thu Sep 03 04:23:39.454564 2026] [:error] [pid 14356:tid 139687880476416] [client 34.50.119.199:35734] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/beta/phpinfo.php"] [unique_id "apk8m0zbFjoHquTB_ymY_gAAABY"]
[Thu Sep 03 04:23:40.175239 2026] [:error] [pid 14231:tid 139687914047232] [client 34.50.119.199:35750] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/uat/phpinfo.php"] [unique_id "apk8nK_YbNcSuH2GNlTOKwAAAFI"]
[Thu Sep 03 04:23:40.893002 2026] [:error] [pid 14239:tid 139687922439936] [client 34.50.119.199:35752] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/qa/phpinfo.php"] [unique_id "apk8nNUIZMka9NNIKm8-1AAAANE"]
[Thu Sep 03 04:23:41.595364 2026] [:error] [pid 14239:tid 139687956010752] [client 34.50.119.199:35760] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/preview/phpinfo.php"] [unique_id "apk8ndUIZMka9NNIKm8-1wAAAM0"]
[Thu Sep 03 04:23:42.305236 2026] [:error] [pid 14356:tid 139688115545856] [client 34.50.119.199:35768] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/www/phpinfo.php"] [unique_id "apk8nkzbFjoHquTB_ymZAQAAAAI"]
[Thu Sep 03 04:23:43.022110 2026] [:error] [pid 14231:tid 139688006366976] [client 34.50.119.199:52440] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/htdocs/phpinfo.php"] [unique_id "apk8n6_YbNcSuH2GNlTOLQAAAEc"]
[Thu Sep 03 04:23:43.726887 2026] [:error] [pid 14356:tid 139687972796160] [client 34.50.119.199:52454] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/public_html/phpinfo.php"] [unique_id "apk8n0zbFjoHquTB_ymZAgAAAAs"]
[Thu Sep 03 04:23:44.422722 2026] [:error] [pid 14239:tid 139688006366976] [client 34.50.119.199:52466] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/site/phpinfo.php"] [unique_id "apk8oNUIZMka9NNIKm8-2QAAAMc"]
[Thu Sep 03 04:23:45.118944 2026] [:error] [pid 14356:tid 139688014759680] [client 34.50.119.199:52476] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/docs/phpinfo.php"] [unique_id "apk8oUzbFjoHquTB_ymZBgAAAAY"]
[Thu Sep 03 04:23:45.821196 2026] [:error] [pid 14356:tid 139687914047232] [client 34.50.119.199:52486] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "apk8oUzbFjoHquTB_ymZBwAAABI"]
[Thu Sep 03 04:23:46.533271 2026] [:error] [pid 14356:tid 139687981188864] [client 34.50.119.199:52498] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/administrator/phpinfo.php"] [unique_id "apk8okzbFjoHquTB_ymZCgAAAAo"]
[Thu Sep 03 04:23:47.258739 2026] [:error] [pid 14239:tid 139687888869120] [client 34.50.119.199:52504] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/core/phpinfo.php"] [unique_id "apk8o9UIZMka9NNIKm8-2gAAANU"]
[Thu Sep 03 04:23:47.960181 2026] [:error] [pid 14356:tid 139687972796160] [client 34.50.119.199:52512] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/includes/phpinfo.php"] [unique_id "apk8o0zbFjoHquTB_ymZDwAAAAs"]
[Thu Sep 03 04:23:48.664491 2026] [:error] [pid 14356:tid 139687939225344] [client 34.50.119.199:52526] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/service-account.json"] [unique_id "apk8pEzbFjoHquTB_ymZEAAAAA8"]
[Thu Sep 03 04:23:49.390327 2026] [:error] [pid 14356:tid 139687914047232] [client 34.50.119.199:52530] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/sa.json"] [unique_id "apk8pUzbFjoHquTB_ymZFAAAABI"]
[Thu Sep 03 04:23:50.098003 2026] [:error] [pid 14356:tid 139688023152384] [client 34.50.119.199:52546] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gcp-key.json"] [unique_id "apk8pkzbFjoHquTB_ymZFQAAAAU"]
[Thu Sep 03 04:23:50.814304 2026] [:error] [pid 14239:tid 139688023152384] [client 34.50.119.199:52554] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gcp-credentials.json"] [unique_id "apk8ptUIZMka9NNIKm8-3gAAAMU"]
[Thu Sep 03 04:23:51.526019 2026] [:error] [pid 14239:tid 139687981188864] [client 34.50.119.199:52560] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/gcp-sa.json"] [unique_id "apk8p9UIZMka9NNIKm8-5AAAAMo"]
[Thu Sep 03 04:23:52.242067 2026] [:error] [pid 14239:tid 139688023152384] [client 34.50.119.199:52572] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/credentials.json"] [unique_id "apk8qNUIZMka9NNIKm8-6gAAAMU"]
[Thu Sep 03 04:23:52.940073 2026] [:error] [pid 14356:tid 139687989581568] [client 34.50.119.199:48856] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/google-credentials.json"] [unique_id "apk8qEzbFjoHquTB_ymZHwAAAAk"]
[Thu Sep 03 04:23:53.648751 2026] [:error] [pid 14356:tid 139688039937792] [client 34.50.119.199:48866] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/google-key.json"] [unique_id "apk8qUzbFjoHquTB_ymZJAAAAAM"]
[Thu Sep 03 04:23:54.353917 2026] [:error] [pid 14356:tid 139687880476416] [client 34.50.119.199:48878] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/.config/gcloud/application_default_credentials.json"] [unique_id "apk8qkzbFjoHquTB_ymZKwAAABY"]
[Thu Sep 03 04:23:55.059068 2026] [:error] [pid 14356:tid 139688123938560] [client 34.50.119.199:48882] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/application_default_credentials.json"] [unique_id "apk8q0zbFjoHquTB_ymZMAAAAAE"]
[Thu Sep 03 04:23:55.783967 2026] [:error] [pid 14231:tid 139687914047232] [client 34.50.119.199:48896] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/key.json"] [unique_id "apk8q6_YbNcSuH2GNlTOOQAAAFI"]
[Thu Sep 03 04:23:56.490163 2026] [:error] [pid 14231:tid 139688014759680] [client 34.50.119.199:48904] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/keyfile.json"] [unique_id "apk8rK_YbNcSuH2GNlTOPgAAAEY"]
[Thu Sep 03 04:23:57.194113 2026] [:error] [pid 14239:tid 139688014759680] [client 34.50.119.199:48910] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/firebase-adminsdk.json"] [unique_id "apk8rdUIZMka9NNIKm8-9QAAAMY"]
[Thu Sep 03 04:23:57.895566 2026] [:error] [pid 14231:tid 139687939225344] [client 34.50.119.199:48920] [client 34.50.119.199] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/firebase-key.json"] [unique_id "apk8ra_YbNcSuH2GNlTOQAAAAE8"]
[Thu Sep 03 05:48:23.901600 2026] [proxy_fcgi:error] [pid 14235:tid 139687872083712] [client 165.22.193.77:34362] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 05:52:21.657769 2026] [proxy_fcgi:error] [pid 19268:tid 139687997974272] [client 212.58.88.226:54816] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 06:05:13.414750 2026] [:error] [pid 19306:tid 139687930832640] [client 162.14.66.219:51054] [client 162.14.66.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "aplUaai1FnX-MFMcAc2zmgAAAVA"]
[Thu Sep 03 06:11:27.325213 2026] [:error] [pid 14231:tid 139687922439936] [client 43.153.107.22:53792] [client 43.153.107.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "aplV36_YbNcSuH2GNlTcEgAAAFE"]
[Thu Sep 03 06:24:40.568366 2026] [proxy_fcgi:error] [pid 14356:tid 139687956010752] [client 62.210.129.237:59336] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 06:58:35.410449 2026] [:error] [pid 30829:tid 139687989581568] [client 43.164.133.138:39944] [client 43.164.133.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "aplg66G5pX3le2RZre0prwAAAYk"]
[Thu Sep 03 07:45:17.461026 2026] [:error] [pid 14239:tid 139688031545088] [client 85.11.167.104:57792] [client 85.11.167.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "aplr3dUIZMka9NNIKm94JwAAAMQ"]
[Thu Sep 03 09:14:53.640076 2026] [:error] [pid 14239:tid 139688123938560] [client 203.189.153.19:49612] [client 203.189.153.19] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "apmA3dUIZMka9NNIKm-aPAAAAME"]
[Thu Sep 03 10:14:57.964445 2026] [:error] [pid 2508:tid 139687897261824] [client 43.160.219.206:46716] [client 43.160.219.206] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apmO8TUo_JB4TCSwEqEiUQAAAJQ"]
[Thu Sep 03 10:32:46.345172 2026] [authz_core:error] [pid 11281:tid 139688031545088] [client 34.26.103.202:49761] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Thu Sep 03 11:02:37.856801 2026] [:error] [pid 2508:tid 139688039937792] [client 43.166.242.189:32870] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apmaHTUo_JB4TCSwEqEsMQAAAIM"]
[Thu Sep 03 11:35:36.422938 2026] [:error] [pid 11281:tid 139687888869120] [client 82.156.88.97:38640] [client 82.156.88.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apmh2A2AIRRSxRqwFeANdgAAAVU"]
[Thu Sep 03 12:50:27.187352 2026] [:error] [pid 3997:tid 139687905654528] [client 35.235.117.59:38328] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "apmzY59yWFkg7dsQCKe2egAAAFM"]
[Thu Sep 03 12:50:29.191665 2026] [:error] [pid 3997:tid 139688031545088] [client 35.235.117.59:38344] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env"] [unique_id "apmzZZ9yWFkg7dsQCKe2fAAAAEQ"]
[Thu Sep 03 12:50:30.668183 2026] [:error] [pid 3997:tid 139688123938560] [client 35.235.117.59:38348] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.local"] [unique_id "apmzZp9yWFkg7dsQCKe2fwAAAEE"]
[Thu Sep 03 12:50:31.495684 2026] [:error] [pid 3912:tid 139687989581568] [client 35.235.117.59:38358] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.production"] [unique_id "apmzZ11PpWlCN_Ixi4Yv2AAAAAk"]
[Thu Sep 03 12:50:32.378768 2026] [:error] [pid 3912:tid 139687972796160] [client 35.235.117.59:38374] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.staging"] [unique_id "apmzaF1PpWlCN_Ixi4Yv2QAAAAs"]
[Thu Sep 03 12:50:33.224999 2026] [:error] [pid 3942:tid 139688006366976] [client 35.235.117.59:38384] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.development"] [unique_id "apmzaVc-FajNlOSdCoJzfAAAAUc"]
[Thu Sep 03 12:50:34.110675 2026] [:error] [pid 3941:tid 139687997974272] [client 35.235.117.59:38400] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.test"] [unique_id "apmzanxCjuXeoAxhvcTW3wAAAQg"]
[Thu Sep 03 12:50:34.858046 2026] [:error] [pid 3941:tid 139687888869120] [client 35.235.117.59:38402] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.remote"] [unique_id "apmzanxCjuXeoAxhvcTW4QAAARU"]
[Thu Sep 03 12:50:35.585679 2026] [:error] [pid 3942:tid 139687989581568] [client 35.235.117.59:52578] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.bak"] [unique_id "apmza1c-FajNlOSdCoJzfgAAAUk"]
[Thu Sep 03 12:50:36.636162 2026] [:error] [pid 3997:tid 139687888869120] [client 35.235.117.59:52594] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup"] [unique_id "apmzbJ9yWFkg7dsQCKe2hwAAAFU"]
[Thu Sep 03 12:50:37.478680 2026] [:error] [pid 3942:tid 139688132331264] [client 35.235.117.59:52608] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.save"] [unique_id "apmzbVc-FajNlOSdCoJzhQAAAUA"]
[Thu Sep 03 12:50:38.432228 2026] [:error] [pid 3997:tid 139687880476416] [client 35.235.117.59:52622] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.old"] [unique_id "apmzbp9yWFkg7dsQCKe2lgAAAFY"]
[Thu Sep 03 12:50:39.244204 2026] [:error] [pid 3942:tid 139687880476416] [client 35.235.117.59:52630] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.sample"] [unique_id "apmzb1c-FajNlOSdCoJzmAAAAVY"]
[Thu Sep 03 12:50:40.013112 2026] [:error] [pid 3941:tid 139687997974272] [client 35.235.117.59:52632] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.example"] [unique_id "apmzcHxCjuXeoAxhvcTXBAAAAQg"]
[Thu Sep 03 12:50:40.858446 2026] [:error] [pid 3942:tid 139688123938560] [client 35.235.117.59:52634] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dev"] [unique_id "apmzcFc-FajNlOSdCoJzowAAAUE"]
[Thu Sep 03 12:50:41.771193 2026] [:error] [pid 3912:tid 139687914047232] [client 35.235.117.59:52640] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.prod"] [unique_id "apmzcV1PpWlCN_Ixi4Yv8gAAABI"]
[Thu Sep 03 12:50:42.578992 2026] [:error] [pid 3997:tid 139687989581568] [client 35.235.117.59:52648] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.stage"] [unique_id "apmzcp9yWFkg7dsQCKe2wQAAAEk"]
[Thu Sep 03 12:50:43.482652 2026] [:error] [pid 3997:tid 139688132331264] [client 35.235.117.59:52652] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.ci"] [unique_id "apmzc59yWFkg7dsQCKe2yQAAAEA"]
[Thu Sep 03 12:50:44.398257 2026] [:error] [pid 3997:tid 139687981188864] [client 35.235.117.59:52656] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.docker"] [unique_id "apmzdJ9yWFkg7dsQCKe21gAAAEo"]
[Thu Sep 03 12:50:45.166860 2026] [:error] [pid 3997:tid 139687914047232] [client 35.235.117.59:60910] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.live"] [unique_id "apmzdZ9yWFkg7dsQCKe24gAAAFI"]
[Thu Sep 03 12:50:46.003712 2026] [:error] [pid 3997:tid 139688006366976] [client 35.235.117.59:60914] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.preprod"] [unique_id "apmzdp9yWFkg7dsQCKe27gAAAEc"]
[Thu Sep 03 12:50:47.506822 2026] [:error] [pid 3997:tid 139687863691008] [client 35.235.117.59:60926] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.uat"] [unique_id "apmzd59yWFkg7dsQCKe2_gAAAFg"]
[Thu Sep 03 12:50:48.249983 2026] [:error] [pid 3997:tid 139687939225344] [client 35.235.117.59:60940] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dist"] [unique_id "apmzeJ9yWFkg7dsQCKe3BAAAAE8"]
[Thu Sep 03 12:50:49.340606 2026] [:error] [pid 3997:tid 139688132331264] [client 35.235.117.59:60944] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.swp"] [unique_id "apmzeZ9yWFkg7dsQCKe3BwAAAEA"]
[Thu Sep 03 12:50:50.255871 2026] [:error] [pid 3941:tid 139687897261824] [client 35.235.117.59:60956] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env~"] [unique_id "apmzenxCjuXeoAxhvcTXHAAAARQ"]
[Thu Sep 03 12:50:51.265436 2026] [:error] [pid 3997:tid 139687880476416] [client 35.235.117.59:60960] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env1"] [unique_id "apmze59yWFkg7dsQCKe3CQAAAFY"]
[Thu Sep 03 12:50:52.094941 2026] [:error] [pid 3942:tid 139688031545088] [client 35.235.117.59:60972] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env2"] [unique_id "apmzfFc-FajNlOSdCoJz4AAAAUQ"]
[Thu Sep 03 12:50:52.879614 2026] [:error] [pid 3941:tid 139687964403456] [client 35.235.117.59:60976] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env_copy"] [unique_id "apmzfHxCjuXeoAxhvcTXHQAAAQw"]
[Thu Sep 03 12:50:53.673941 2026] [:error] [pid 3912:tid 139688132331264] [client 35.235.117.59:60988] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.txt"] [unique_id "apmzfV1PpWlCN_Ixi4YwAAAAAAA"]
[Thu Sep 03 12:50:54.694493 2026] [:error] [pid 3997:tid 139688023152384] [client 35.235.117.59:60990] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.json"] [unique_id "apmzfp9yWFkg7dsQCKe3DwAAAEU"]
[Thu Sep 03 12:50:55.414828 2026] [:error] [pid 3942:tid 139687914047232] [client 35.235.117.59:52664] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.yaml"] [unique_id "apmzf1c-FajNlOSdCoJz5gAAAVI"]
[Thu Sep 03 12:50:56.245495 2026] [:error] [pid 3997:tid 139688006366976] [client 35.235.117.59:52678] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.yml"] [unique_id "apmzgJ9yWFkg7dsQCKe3FQAAAEc"]
[Thu Sep 03 12:50:56.996111 2026] [:error] [pid 3941:tid 139687905654528] [client 35.235.117.59:52680] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/.env"] [unique_id "apmzgHxCjuXeoAxhvcTXJAAAARM"]
[Thu Sep 03 12:50:57.736790 2026] [:error] [pid 3997:tid 139687989581568] [client 35.235.117.59:52684] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/apps/.env"] [unique_id "apmzgZ9yWFkg7dsQCKe3GAAAAEk"]
[Thu Sep 03 12:50:58.515173 2026] [:error] [pid 3912:tid 139687914047232] [client 35.235.117.59:52686] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/.env"] [unique_id "apmzgl1PpWlCN_Ixi4YwBQAAABI"]
[Thu Sep 03 12:50:59.459798 2026] [:error] [pid 3912:tid 139687981188864] [client 35.235.117.59:52698] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/web/.env"] [unique_id "apmzg11PpWlCN_Ixi4YwCAAAAAo"]
[Thu Sep 03 12:51:00.210777 2026] [:error] [pid 3942:tid 139687863691008] [client 35.235.117.59:52706] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/site/.env"] [unique_id "apmzhFc-FajNlOSdCoJz7QAAAVg"]
[Thu Sep 03 12:51:01.003916 2026] [:error] [pid 3997:tid 139687872083712] [client 35.235.117.59:52716] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/public/.env"] [unique_id "apmzhZ9yWFkg7dsQCKe3IQAAAFc"]
[Thu Sep 03 12:51:01.950861 2026] [:error] [pid 3912:tid 139687972796160] [client 35.235.117.59:52724] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin/.env"] [unique_id "apmzhV1PpWlCN_Ixi4YwCgAAAAs"]
[Thu Sep 03 12:51:02.753965 2026] [:error] [pid 3941:tid 139687981188864] [client 35.235.117.59:52730] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend/.env"] [unique_id "apmzhnxCjuXeoAxhvcTXMQAAAQo"]
[Thu Sep 03 12:51:03.706466 2026] [:error] [pid 3997:tid 139687897261824] [client 35.235.117.59:52744] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/server/.env"] [unique_id "apmzh59yWFkg7dsQCKe3JQAAAFQ"]
[Thu Sep 03 12:51:04.546890 2026] [:error] [pid 3941:tid 139687914047232] [client 35.235.117.59:52754] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/frontend/.env"] [unique_id "apmziHxCjuXeoAxhvcTXMwAAARI"]
[Thu Sep 03 12:51:05.393271 2026] [:error] [pid 3997:tid 139687997974272] [client 35.235.117.59:54848] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/src/.env"] [unique_id "apmziZ9yWFkg7dsQCKe3KQAAAEg"]
[Thu Sep 03 12:51:06.400721 2026] [:error] [pid 3997:tid 139688023152384] [client 35.235.117.59:54850] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/core/.env"] [unique_id "apmzip9yWFkg7dsQCKe3LgAAAEU"]
[Thu Sep 03 12:51:07.246631 2026] [:error] [pid 3912:tid 139688031545088] [client 35.235.117.59:54862] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/core/app/.env"] [unique_id "apmzi11PpWlCN_Ixi4YwDAAAAAQ"]
[Thu Sep 03 12:51:08.042268 2026] [:error] [pid 3997:tid 139687989581568] [client 35.235.117.59:54868] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/config/.env"] [unique_id "apmzjJ9yWFkg7dsQCKe3MgAAAEk"]
[Thu Sep 03 12:51:08.898084 2026] [:error] [pid 3942:tid 139687863691008] [client 35.235.117.59:54872] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/private/.env"] [unique_id "apmzjFc-FajNlOSdCoJz8wAAAVg"]
[Thu Sep 03 12:51:09.786889 2026] [:error] [pid 3997:tid 139688115545856] [client 35.235.117.59:54880] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/application/.env"] [unique_id "apmzjZ9yWFkg7dsQCKe3NwAAAEI"]
[Thu Sep 03 12:51:10.487559 2026] [:error] [pid 3942:tid 139688132331264] [client 35.235.117.59:54888] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/bootstrap/.env"] [unique_id "apmzjlc-FajNlOSdCoJz9gAAAUA"]
[Thu Sep 03 12:51:11.408914 2026] [:error] [pid 3997:tid 139687888869120] [client 35.235.117.59:54892] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/database/.env"] [unique_id "apmzj59yWFkg7dsQCKe3PgAAAFU"]
[Thu Sep 03 12:51:12.159235 2026] [:error] [pid 3941:tid 139687956010752] [client 35.235.117.59:54898] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/storage/.env"] [unique_id "apmzkHxCjuXeoAxhvcTXPgAAAQ0"]
[Thu Sep 03 12:51:14.151059 2026] [:error] [pid 3997:tid 139687947618048] [client 35.235.117.59:54902] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/var/www/.env"] [unique_id "apmzkp9yWFkg7dsQCKe3RgAAAE4"]
[Thu Sep 03 12:51:15.017251 2026] [:error] [pid 3941:tid 139688006366976] [client 35.235.117.59:54916] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/var/www/html/.env"] [unique_id "apmzk3xCjuXeoAxhvcTXQgAAAQc"]
[Thu Sep 03 12:51:15.906875 2026] [:error] [pid 3997:tid 139688123938560] [client 35.235.117.59:33212] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/current/.env"] [unique_id "apmzk59yWFkg7dsQCKe3TgAAAEE"]
[Thu Sep 03 12:51:16.639015 2026] [:error] [pid 3997:tid 139687997974272] [client 35.235.117.59:33224] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/release/.env"] [unique_id "apmzlJ9yWFkg7dsQCKe3TwAAAEg"]
[Thu Sep 03 12:51:17.439543 2026] [:error] [pid 3941:tid 139687888869120] [client 35.235.117.59:33232] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/releases/.env"] [unique_id "apmzlXxCjuXeoAxhvcTXRQAAARU"]
[Thu Sep 03 12:51:18.486407 2026] [:error] [pid 3997:tid 139688132331264] [client 35.235.117.59:33234] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/shared/.env"] [unique_id "apmzlp9yWFkg7dsQCKe3VAAAAEA"]
[Thu Sep 03 12:51:19.838853 2026] [:error] [pid 3997:tid 139688115545856] [client 35.235.117.59:33244] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/deploy/.env"] [unique_id "apmzl59yWFkg7dsQCKe3WwAAAEI"]
[Thu Sep 03 12:51:20.638795 2026] [:error] [pid 3912:tid 139688115545856] [client 35.235.117.59:33260] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/build/.env"] [unique_id "apmzmF1PpWlCN_Ixi4YwGQAAAAI"]
[Thu Sep 03 12:51:21.501902 2026] [:error] [pid 3997:tid 139687888869120] [client 35.235.117.59:33266] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dist/.env"] [unique_id "apmzmZ9yWFkg7dsQCKe3YwAAAFU"]
[Thu Sep 03 12:51:22.279493 2026] [:error] [pid 3997:tid 139687905654528] [client 35.235.117.59:33274] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/public_html/.env"] [unique_id "apmzmp9yWFkg7dsQCKe3ZQAAAFM"]
[Thu Sep 03 12:51:23.190619 2026] [:error] [pid 3942:tid 139687922439936] [client 35.235.117.59:33276] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/htdocs/.env"] [unique_id "apmzm1c-FajNlOSdCoJ0CQAAAVE"]
[Thu Sep 03 12:51:24.109321 2026] [:error] [pid 3942:tid 139687914047232] [client 35.235.117.59:33278] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/www/.env"] [unique_id "apmznFc-FajNlOSdCoJ0EAAAAVI"]
[Thu Sep 03 12:51:24.905856 2026] [:error] [pid 3942:tid 139687880476416] [client 35.235.117.59:33286] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/html/.env"] [unique_id "apmznFc-FajNlOSdCoJ0EwAAAVY"]
[Thu Sep 03 12:51:25.815168 2026] [:error] [pid 3997:tid 139687956010752] [client 35.235.117.59:59744] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/live/.env"] [unique_id "apmznZ9yWFkg7dsQCKe3cwAAAE0"]
[Thu Sep 03 12:51:26.830561 2026] [:error] [pid 3912:tid 139688115545856] [client 35.235.117.59:59750] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/prod/.env"] [unique_id "apmznl1PpWlCN_Ixi4YwJwAAAAI"]
[Thu Sep 03 12:51:27.785986 2026] [:error] [pid 3942:tid 139687897261824] [client 35.235.117.59:59760] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dev/.env"] [unique_id "apmzn1c-FajNlOSdCoJ0HAAAAVQ"]
[Thu Sep 03 12:51:28.570476 2026] [:error] [pid 3912:tid 139687989581568] [client 35.235.117.59:59772] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/staging/.env"] [unique_id "apmzoF1PpWlCN_Ixi4YwLgAAAAk"]
[Thu Sep 03 12:51:29.505848 2026] [:error] [pid 3912:tid 139687888869120] [client 35.235.117.59:59778] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/opt/.env"] [unique_id "apmzoV1PpWlCN_Ixi4YwLwAAABU"]
[Thu Sep 03 12:51:30.295014 2026] [:error] [pid 3912:tid 139687872083712] [client 35.235.117.59:59794] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/laravel/.env"] [unique_id "apmzol1PpWlCN_Ixi4YwMAAAABc"]
[Thu Sep 03 12:51:31.109889 2026] [:error] [pid 3912:tid 139688023152384] [client 35.235.117.59:59802] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/symfony/.env"] [unique_id "apmzo11PpWlCN_Ixi4YwMQAAAAU"]
[Thu Sep 03 12:51:31.971061 2026] [:error] [pid 3942:tid 139687964403456] [client 35.235.117.59:59808] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wordpress/.env"] [unique_id "apmzo1c-FajNlOSdCoJ0IAAAAUw"]
[Thu Sep 03 12:51:32.679855 2026] [:error] [pid 3912:tid 139687880476416] [client 35.235.117.59:59824] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp/.env"] [unique_id "apmzpF1PpWlCN_Ixi4YwNgAAABY"]
[Thu Sep 03 12:51:33.496872 2026] [:error] [pid 3942:tid 139688123938560] [client 35.235.117.59:59836] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cms/.env"] [unique_id "apmzpVc-FajNlOSdCoJ0IwAAAUE"]
[Thu Sep 03 12:51:34.318512 2026] [:error] [pid 3997:tid 139687947618048] [client 35.235.117.59:59842] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/drupal/.env"] [unique_id "apmzpp9yWFkg7dsQCKe3jQAAAE4"]
[Thu Sep 03 12:51:35.128968 2026] [:error] [pid 3942:tid 139687888869120] [client 35.235.117.59:48688] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/joomla/.env"] [unique_id "apmzp1c-FajNlOSdCoJ0JwAAAVU"]
[Thu Sep 03 12:51:35.998158 2026] [:error] [pid 3997:tid 139688132331264] [client 35.235.117.59:48698] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/magento/.env"] [unique_id "apmzp59yWFkg7dsQCKe3kQAAAEA"]
[Thu Sep 03 12:51:37.737561 2026] [:error] [pid 3942:tid 139687956010752] [client 35.235.117.59:48700] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/shopify/.env"] [unique_id "apmzqVc-FajNlOSdCoJ0KgAAAU0"]
[Thu Sep 03 12:51:38.573947 2026] [:error] [pid 3912:tid 139688006366976] [client 35.235.117.59:48716] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/prestashop/.env"] [unique_id "apmzql1PpWlCN_Ixi4YwQwAAAAc"]
[Thu Sep 03 12:51:39.442972 2026] [:error] [pid 3997:tid 139687981188864] [client 35.235.117.59:48720] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/codeigniter/.env"] [unique_id "apmzq59yWFkg7dsQCKe3kgAAAEo"]
[Thu Sep 03 12:51:40.375706 2026] [:error] [pid 3912:tid 139687997974272] [client 35.235.117.59:48730] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cakephp/.env"] [unique_id "apmzrF1PpWlCN_Ixi4YwUQAAAAg"]
[Thu Sep 03 12:51:41.336603 2026] [:error] [pid 3941:tid 139687914047232] [client 35.235.117.59:48746] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/zend/.env"] [unique_id "apmzrXxCjuXeoAxhvcTXcwAAARI"]
[Thu Sep 03 12:51:42.361985 2026] [:error] [pid 3942:tid 139687863691008] [client 35.235.117.59:48752] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/yii/.env"] [unique_id "apmzrlc-FajNlOSdCoJ0LAAAAVg"]
[Thu Sep 03 12:51:43.138137 2026] [:error] [pid 3942:tid 139688123938560] [client 35.235.117.59:48762] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/laravel5/.env"] [unique_id "apmzr1c-FajNlOSdCoJ0LwAAAUE"]
[Thu Sep 03 12:51:44.105576 2026] [:error] [pid 3997:tid 139688123938560] [client 35.235.117.59:48774] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v1/.env"] [unique_id "apmzsJ9yWFkg7dsQCKe3lQAAAEE"]
[Thu Sep 03 12:51:44.996475 2026] [:error] [pid 3912:tid 139687905654528] [client 35.235.117.59:48784] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v2/.env"] [unique_id "apmzsF1PpWlCN_Ixi4YwVAAAABM"]
[Thu Sep 03 12:51:45.808308 2026] [:error] [pid 3942:tid 139687872083712] [client 35.235.117.59:42280] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v3/.env"] [unique_id "apmzsVc-FajNlOSdCoJ0MQAAAVc"]
[Thu Sep 03 12:51:46.709225 2026] [:error] [pid 3942:tid 139688115545856] [client 35.235.117.59:42292] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/v1/.env"] [unique_id "apmzslc-FajNlOSdCoJ0NAAAAUI"]
[Thu Sep 03 12:51:47.563893 2026] [:error] [pid 3912:tid 139687897261824] [client 35.235.117.59:42298] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/v2/.env"] [unique_id "apmzs11PpWlCN_Ixi4YwXQAAABQ"]
[Thu Sep 03 12:51:48.434341 2026] [:error] [pid 3941:tid 139687888869120] [client 35.235.117.59:42302] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/rest/.env"] [unique_id "apmztHxCjuXeoAxhvcTXdwAAARU"]
[Thu Sep 03 12:51:49.207911 2026] [:error] [pid 3997:tid 139688115545856] [client 35.235.117.59:42312] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/graphql/.env"] [unique_id "apmztZ9yWFkg7dsQCKe3owAAAEI"]
[Thu Sep 03 12:51:50.090949 2026] [:error] [pid 3912:tid 139687997974272] [client 35.235.117.59:42320] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/gateway/.env"] [unique_id "apmztl1PpWlCN_Ixi4YwXwAAAAg"]
[Thu Sep 03 12:51:51.008969 2026] [:error] [pid 3912:tid 139687922439936] [client 35.235.117.59:42322] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/microservice/.env"] [unique_id "apmzt11PpWlCN_Ixi4YwZAAAABE"]
[Thu Sep 03 12:51:51.818172 2026] [:error] [pid 3942:tid 139687872083712] [client 35.235.117.59:42332] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/service/.env"] [unique_id "apmzt1c-FajNlOSdCoJ0PQAAAVc"]
[Thu Sep 03 12:51:52.594779 2026] [:error] [pid 3941:tid 139687939225344] [client 35.235.117.59:42344] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/v3/.env"] [unique_id "apmzuHxCjuXeoAxhvcTXewAAAQ8"]
[Thu Sep 03 12:51:53.503403 2026] [:error] [pid 3912:tid 139687972796160] [client 35.235.117.59:42346] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/dev/.env"] [unique_id "apmzuV1PpWlCN_Ixi4YwagAAAAs"]
[Thu Sep 03 12:51:54.333416 2026] [:error] [pid 3941:tid 139687905654528] [client 35.235.117.59:42358] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/staging/.env"] [unique_id "apmzunxCjuXeoAxhvcTXfwAAARM"]
[Thu Sep 03 12:51:55.094913 2026] [:error] [pid 3912:tid 139688115545856] [client 35.235.117.59:56482] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/vendor/.env"] [unique_id "apmzu11PpWlCN_Ixi4YwbgAAAAI"]
[Thu Sep 03 12:51:55.922559 2026] [:error] [pid 3941:tid 139688014759680] [client 35.235.117.59:56498] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/lib/.env"] [unique_id "apmzu3xCjuXeoAxhvcTXggAAAQY"]
[Thu Sep 03 12:51:57.960136 2026] [:error] [pid 3942:tid 139687981188864] [client 35.235.117.59:56502] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/resources/.env"] [unique_id "apmzvVc-FajNlOSdCoJ0UAAAAUo"]
[Thu Sep 03 12:51:58.817973 2026] [:error] [pid 3941:tid 139687888869120] [client 35.235.117.59:56504] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/assets/.env"] [unique_id "apmzvnxCjuXeoAxhvcTXhAAAARU"]
[Thu Sep 03 12:51:59.592740 2026] [:error] [pid 3942:tid 139687888869120] [client 35.235.117.59:56510] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/uploads/.env"] [unique_id "apmzv1c-FajNlOSdCoJ0UgAAAVU"]
[Thu Sep 03 12:52:00.517299 2026] [:error] [pid 3997:tid 139688006366976] [client 35.235.117.59:56518] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/internal/.env"] [unique_id "apmzwJ9yWFkg7dsQCKe31wAAAEc"]
[Thu Sep 03 12:52:01.430894 2026] [:error] [pid 3997:tid 139687997974272] [client 35.235.117.59:56526] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/tools/.env"] [unique_id "apmzwZ9yWFkg7dsQCKe34AAAAEg"]
[Thu Sep 03 12:52:02.278728 2026] [:error] [pid 3997:tid 139687964403456] [client 35.235.117.59:56536] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/scripts/.env"] [unique_id "apmzwp9yWFkg7dsQCKe34gAAAEw"]
[Thu Sep 03 12:52:03.220122 2026] [:error] [pid 3997:tid 139688123938560] [client 35.235.117.59:56544] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/bin/.env"] [unique_id "apmzw59yWFkg7dsQCKe36AAAAEE"]
[Thu Sep 03 12:52:04.014608 2026] [:error] [pid 3997:tid 139687863691008] [client 35.235.117.59:56558] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sbin/.env"] [unique_id "apmzxJ9yWFkg7dsQCKe36wAAAFg"]
[Thu Sep 03 12:52:04.848980 2026] [:error] [pid 3912:tid 139687997974272] [client 35.235.117.59:56574] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/local/.env"] [unique_id "apmzxF1PpWlCN_Ixi4YwdwAAAAg"]
[Thu Sep 03 12:52:06.686874 2026] [:error] [pid 3912:tid 139687905654528] [client 35.235.117.59:41626] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/portal/.env"] [unique_id "apmzxl1PpWlCN_Ixi4YweAAAABM"]
[Thu Sep 03 12:52:07.602821 2026] [:error] [pid 3941:tid 139687972796160] [client 35.235.117.59:41630] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dashboard/.env"] [unique_id "apmzx3xCjuXeoAxhvcTXjQAAAQs"]
[Thu Sep 03 12:52:08.432519 2026] [:error] [pid 3942:tid 139687947618048] [client 35.235.117.59:41646] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/panel/.env"] [unique_id "apmzyFc-FajNlOSdCoJ0XAAAAU4"]
[Thu Sep 03 12:52:09.196237 2026] [:error] [pid 3942:tid 139687914047232] [client 35.235.117.59:41650] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/crm/.env"] [unique_id "apmzyVc-FajNlOSdCoJ0XgAAAVI"]
[Thu Sep 03 12:52:10.076870 2026] [:error] [pid 3912:tid 139687981188864] [client 35.235.117.59:41654] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/erp/.env"] [unique_id "apmzyl1PpWlCN_Ixi4YwegAAAAo"]
[Thu Sep 03 12:52:10.982193 2026] [:error] [pid 3942:tid 139688115545856] [client 35.235.117.59:41664] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/shop/.env"] [unique_id "apmzylc-FajNlOSdCoJ0XwAAAUI"]
[Thu Sep 03 12:52:11.809039 2026] [:error] [pid 3912:tid 139688132331264] [client 35.235.117.59:41666] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/store/.env"] [unique_id "apmzy11PpWlCN_Ixi4YwfAAAAAA"]
[Thu Sep 03 12:52:12.634353 2026] [:error] [pid 3941:tid 139687981188864] [client 35.235.117.59:41674] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/saas/.env"] [unique_id "apmzzHxCjuXeoAxhvcTXkAAAAQo"]
[Thu Sep 03 12:52:13.518177 2026] [:error] [pid 3912:tid 139688006366976] [client 35.235.117.59:41684] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/client/.env"] [unique_id "apmzzV1PpWlCN_Ixi4YwfgAAAAc"]
[Thu Sep 03 12:52:14.358325 2026] [:error] [pid 3997:tid 139687972796160] [client 35.235.117.59:41698] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/project/.env"] [unique_id "apmzzp9yWFkg7dsQCKe4AQAAAEs"]
[Thu Sep 03 12:52:15.128707 2026] [:error] [pid 3942:tid 139687997974272] [client 35.235.117.59:51960] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin-panel/.env"] [unique_id "apmzz1c-FajNlOSdCoJ0YgAAAUg"]
[Thu Sep 03 12:52:15.872905 2026] [:error] [pid 3941:tid 139687956010752] [client 35.235.117.59:51972] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/control-panel/.env"] [unique_id "apmzz3xCjuXeoAxhvcTXkgAAAQ0"]
[Thu Sep 03 12:52:16.744363 2026] [:error] [pid 3997:tid 139688123938560] [client 35.235.117.59:51978] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/user-panel/.env"] [unique_id "apmz0J9yWFkg7dsQCKe4AwAAAEE"]
[Thu Sep 03 12:52:17.769609 2026] [:error] [pid 3997:tid 139687964403456] [client 35.235.117.59:51994] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/node/.env"] [unique_id "apmz0Z9yWFkg7dsQCKe4BQAAAEw"]
[Thu Sep 03 12:52:18.822361 2026] [:error] [pid 3997:tid 139687947618048] [client 35.235.117.59:52002] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/express/.env"] [unique_id "apmz0p9yWFkg7dsQCKe4BgAAAE4"]
[Thu Sep 03 12:52:19.905133 2026] [:error] [pid 3941:tid 139688123938560] [client 35.235.117.59:52014] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/next/.env"] [unique_id "apmz03xCjuXeoAxhvcTXlAAAAQE"]
[Thu Sep 03 12:52:20.743365 2026] [:error] [pid 3942:tid 139687989581568] [client 35.235.117.59:52028] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/nuxt/.env"] [unique_id "apmz1Fc-FajNlOSdCoJ0ZQAAAUk"]
[Thu Sep 03 12:52:21.646991 2026] [:error] [pid 3942:tid 139687922439936] [client 35.235.117.59:52032] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/nest/.env"] [unique_id "apmz1Vc-FajNlOSdCoJ0ZgAAAVE"]
[Thu Sep 03 12:52:22.432474 2026] [:error] [pid 3997:tid 139688115545856] [client 35.235.117.59:52042] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/react/.env"] [unique_id "apmz1p9yWFkg7dsQCKe4DAAAAEI"]
[Thu Sep 03 12:52:23.983541 2026] [:error] [pid 3912:tid 139687997974272] [client 35.235.117.59:52056] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/vue/.env"] [unique_id "apmz111PpWlCN_Ixi4YwgwAAAAg"]
[Thu Sep 03 12:52:24.866600 2026] [:error] [pid 3941:tid 139688014759680] [client 35.235.117.59:52062] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/angular/.env"] [unique_id "apmz2HxCjuXeoAxhvcTXmQAAAQY"]
[Thu Sep 03 12:52:25.801730 2026] [:error] [pid 3997:tid 139687922439936] [client 35.235.117.59:35618] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/svelte/.env"] [unique_id "apmz2Z9yWFkg7dsQCKe4EgAAAFE"]
[Thu Sep 03 12:52:26.707819 2026] [:error] [pid 3942:tid 139687947618048] [client 35.235.117.59:35632] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/vite/.env"] [unique_id "apmz2lc-FajNlOSdCoJ0awAAAU4"]
[Thu Sep 03 12:52:27.812348 2026] [:error] [pid 3942:tid 139688115545856] [client 35.235.117.59:35644] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backup/.env"] [unique_id "apmz21c-FajNlOSdCoJ0bgAAAUI"]
[Thu Sep 03 12:52:28.616986 2026] [:error] [pid 3942:tid 139687997974272] [client 35.235.117.59:35656] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backups/.env"] [unique_id "apmz3Fc-FajNlOSdCoJ0cAAAAUg"]
[Thu Sep 03 12:52:29.509756 2026] [:error] [pid 3941:tid 139688115545856] [client 35.235.117.59:35658] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/old/.env"] [unique_id "apmz3XxCjuXeoAxhvcTXmwAAAQI"]
[Thu Sep 03 12:52:30.209258 2026] [:error] [pid 3997:tid 139687863691008] [client 35.235.117.59:35662] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/tmp/.env"] [unique_id "apmz3p9yWFkg7dsQCKe4GAAAAFg"]
[Thu Sep 03 12:52:31.059819 2026] [:error] [pid 3997:tid 139687930832640] [client 35.235.117.59:35676] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/temp/.env"] [unique_id "apmz359yWFkg7dsQCKe4GQAAAFA"]
[Thu Sep 03 12:52:31.975032 2026] [:error] [pid 3997:tid 139687880476416] [client 35.235.117.59:35688] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/lab/.env"] [unique_id "apmz359yWFkg7dsQCKe4GwAAAFY"]
[Thu Sep 03 12:52:32.717811 2026] [:error] [pid 3942:tid 139687981188864] [client 35.235.117.59:35694] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cronlab/.env"] [unique_id "apmz4Fc-FajNlOSdCoJ0cgAAAUo"]
[Thu Sep 03 12:52:33.496770 2026] [:error] [pid 3941:tid 139687964403456] [client 35.235.117.59:35700] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cron/.env"] [unique_id "apmz4XxCjuXeoAxhvcTXnAAAAQw"]
[Thu Sep 03 12:52:34.428345 2026] [:error] [pid 3942:tid 139688123938560] [client 35.235.117.59:35716] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/en/.env"] [unique_id "apmz4lc-FajNlOSdCoJ0dAAAAUE"]
[Thu Sep 03 12:52:35.244027 2026] [:error] [pid 3912:tid 139688115545856] [client 35.235.117.59:45478] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/administrator/.env"] [unique_id "apmz411PpWlCN_Ixi4YwhgAAAAI"]
[Thu Sep 03 12:52:36.186585 2026] [:error] [pid 3942:tid 139687947618048] [client 35.235.117.59:45480] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/psnlink/.env"] [unique_id "apmz5Fc-FajNlOSdCoJ0dQAAAU4"]
[Thu Sep 03 12:52:37.201743 2026] [:error] [pid 3941:tid 139688132331264] [client 35.235.117.59:45492] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/exapi/.env"] [unique_id "apmz5XxCjuXeoAxhvcTXnwAAAQA"]
[Thu Sep 03 12:52:38.038934 2026] [:error] [pid 3997:tid 139688023152384] [client 35.235.117.59:45508] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sitemaps/.env"] [unique_id "apmz5p9yWFkg7dsQCKe4IAAAAEU"]
[Thu Sep 03 12:52:38.881756 2026] [:error] [pid 3997:tid 139687989581568] [client 35.235.117.59:45522] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup1"] [unique_id "apmz5p9yWFkg7dsQCKe4IgAAAEk"]
[Thu Sep 03 12:52:39.644787 2026] [:error] [pid 3997:tid 139688115545856] [client 35.235.117.59:45530] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup2"] [unique_id "apmz559yWFkg7dsQCKe4IwAAAEI"]
[Thu Sep 03 12:52:40.839563 2026] [proxy_fcgi:error] [pid 3942:tid 139687997974272] [client 116.202.114.227:55250] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:52:41.297775 2026] [:error] [pid 3942:tid 139687905654528] [client 35.235.117.59:45536] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/logs/.env"] [unique_id "apmz6Vc-FajNlOSdCoJ0egAAAVM"]
[Thu Sep 03 12:52:42.067246 2026] [:error] [pid 3997:tid 139687972796160] [client 35.235.117.59:45538] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cache/.env"] [unique_id "apmz6p9yWFkg7dsQCKe4JAAAAEs"]
[Thu Sep 03 12:52:42.838476 2026] [:error] [pid 3997:tid 139687872083712] [client 35.235.117.59:45550] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailer/.env"] [unique_id "apmz6p9yWFkg7dsQCKe4JQAAAFc"]
[Thu Sep 03 12:52:43.731566 2026] [:error] [pid 3997:tid 139687914047232] [client 35.235.117.59:45560] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mail/.env"] [unique_id "apmz659yWFkg7dsQCKe4JgAAAFI"]
[Thu Sep 03 12:52:44.771956 2026] [:error] [pid 3942:tid 139687981188864] [client 35.235.117.59:45564] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/email/.env"] [unique_id "apmz7Fc-FajNlOSdCoJ0ewAAAUo"]
[Thu Sep 03 12:52:45.723234 2026] [:error] [pid 3997:tid 139688014759680] [client 35.235.117.59:46592] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/smtp/.env"] [unique_id "apmz7Z9yWFkg7dsQCKe4JwAAAEY"]
[Thu Sep 03 12:52:46.480471 2026] [:error] [pid 3997:tid 139688006366976] [client 35.235.117.59:46606] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailing/.env"] [unique_id "apmz7p9yWFkg7dsQCKe4KgAAAEc"]
[Thu Sep 03 12:52:47.391468 2026] [:error] [pid 3997:tid 139687947618048] [client 35.235.117.59:46614] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/notifications/.env"] [unique_id "apmz759yWFkg7dsQCKe4KwAAAE4"]
[Thu Sep 03 12:52:48.118156 2026] [:error] [pid 3997:tid 139688023152384] [client 35.235.117.59:46616] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/notify/.env"] [unique_id "apmz8J9yWFkg7dsQCKe4LAAAAEU"]
[Thu Sep 03 12:52:48.930052 2026] [:error] [pid 3997:tid 139687939225344] [client 35.235.117.59:46630] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sender/.env"] [unique_id "apmz8J9yWFkg7dsQCKe4LQAAAE8"]
[Thu Sep 03 12:52:49.907201 2026] [:error] [pid 3997:tid 139687997974272] [client 35.235.117.59:46644] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/campaign/.env"] [unique_id "apmz8Z9yWFkg7dsQCKe4LgAAAEg"]
[Thu Sep 03 12:52:50.747228 2026] [:error] [pid 3942:tid 139687922439936] [client 35.235.117.59:46654] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/newsletter/.env"] [unique_id "apmz8lc-FajNlOSdCoJ0fwAAAVE"]
[Thu Sep 03 12:52:51.537215 2026] [:error] [pid 3997:tid 139688115545856] [client 35.235.117.59:46664] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/ses/.env"] [unique_id "apmz859yWFkg7dsQCKe4MAAAAEI"]
[Thu Sep 03 12:52:52.259848 2026] [:error] [pid 3997:tid 139687880476416] [client 35.235.117.59:46676] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sendgrid/.env"] [unique_id "apmz9J9yWFkg7dsQCKe4NAAAAFY"]
[Thu Sep 03 12:52:52.997685 2026] [:error] [pid 3997:tid 139687981188864] [client 35.235.117.59:46682] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sparkpost/.env"] [unique_id "apmz9J9yWFkg7dsQCKe4NQAAAEo"]
[Thu Sep 03 12:52:53.818388 2026] [:error] [pid 3997:tid 139687964403456] [client 35.235.117.59:46696] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/postmark/.env"] [unique_id "apmz9Z9yWFkg7dsQCKe4NgAAAEw"]
[Thu Sep 03 12:52:54.645557 2026] [:error] [pid 3997:tid 139687888869120] [client 35.235.117.59:46704] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailgun/.env"] [unique_id "apmz9p9yWFkg7dsQCKe4NwAAAFU"]
[Thu Sep 03 12:52:55.407010 2026] [:error] [pid 3997:tid 139688132331264] [client 35.235.117.59:41674] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mandrill/.env"] [unique_id "apmz959yWFkg7dsQCKe4OAAAAEA"]
[Thu Sep 03 12:52:56.159672 2026] [:error] [pid 3941:tid 139687922439936] [client 35.235.117.59:41682] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailjet/.env"] [unique_id "apmz-HxCjuXeoAxhvcTXowAAARE"]
[Thu Sep 03 12:52:57.736825 2026] [:error] [pid 3997:tid 139687897261824] [client 35.235.117.59:41686] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/brevo/.env"] [unique_id "apmz-Z9yWFkg7dsQCKe4OgAAAFQ"]
[Thu Sep 03 12:52:58.510700 2026] [:error] [pid 3997:tid 139687956010752] [client 35.235.117.59:41702] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/transactional/.env"] [unique_id "apmz-p9yWFkg7dsQCKe4OwAAAE0"]
[Thu Sep 03 12:52:59.307116 2026] [:error] [pid 3997:tid 139687872083712] [client 35.235.117.59:41706] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/bulk/.env"] [unique_id "apmz-59yWFkg7dsQCKe4PAAAAFc"]
[Thu Sep 03 12:53:00.164532 2026] [:error] [pid 3997:tid 139687914047232] [client 35.235.117.59:41716] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/aws/.env"] [unique_id "apmz_J9yWFkg7dsQCKe4PQAAAFI"]
[Thu Sep 03 12:53:00.985972 2026] [:error] [pid 3942:tid 139687872083712] [client 35.235.117.59:41724] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/azure/.env"] [unique_id "apmz_Fc-FajNlOSdCoJ0ggAAAVc"]
[Thu Sep 03 12:53:01.847757 2026] [:error] [pid 3942:tid 139688039937792] [client 35.235.117.59:41736] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/gcp/.env"] [unique_id "apmz_Vc-FajNlOSdCoJ0gwAAAUM"]
[Thu Sep 03 12:53:02.610822 2026] [:error] [pid 3942:tid 139687914047232] [client 35.235.117.59:41742] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cloud/.env"] [unique_id "apmz_lc-FajNlOSdCoJ0hQAAAVI"]
[Thu Sep 03 12:53:03.562429 2026] [:error] [pid 3997:tid 139687922439936] [client 35.235.117.59:41752] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/infrastructure/.env"] [unique_id "apmz_59yWFkg7dsQCKe4QAAAAFE"]
[Thu Sep 03 12:53:04.405846 2026] [:error] [pid 3997:tid 139688123938560] [client 35.235.117.59:41754] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/docker/.env"] [unique_id "apm0AJ9yWFkg7dsQCKe4QgAAAEE"]
[Thu Sep 03 12:53:05.411138 2026] [:error] [pid 3997:tid 139687897261824] [client 35.235.117.59:38360] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/k8s/.env"] [unique_id "apm0AZ9yWFkg7dsQCKe4RQAAAFQ"]
[Thu Sep 03 12:53:06.164583 2026] [:error] [pid 3941:tid 139688031545088] [client 35.235.117.59:38372] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/kubernetes/.env"] [unique_id "apm0AnxCjuXeoAxhvcTXpQAAAQQ"]
[Thu Sep 03 12:53:06.924460 2026] [:error] [pid 3912:tid 139688031545088] [client 35.235.117.59:38382] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/terraform/.env"] [unique_id "apm0Al1PpWlCN_Ixi4YwjAAAAAQ"]
[Thu Sep 03 12:53:07.835350 2026] [:error] [pid 3942:tid 139687863691008] [client 35.235.117.59:38390] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/ansible/.env"] [unique_id "apm0A1c-FajNlOSdCoJ0hwAAAVg"]
[Thu Sep 03 12:53:08.633513 2026] [:error] [pid 3997:tid 139687930832640] [client 35.235.117.59:38396] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/.env"] [unique_id "apm0BJ9yWFkg7dsQCKe4RgAAAFA"]
[Thu Sep 03 12:53:09.542497 2026] [:error] [pid 3941:tid 139687888869120] [client 35.235.117.59:38406] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/ci/.env"] [unique_id "apm0BXxCjuXeoAxhvcTXpgAAARU"]
[Thu Sep 03 12:53:10.515700 2026] [:error] [pid 3941:tid 139687964403456] [client 35.235.117.59:38420] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cd/.env"] [unique_id "apm0BnxCjuXeoAxhvcTXpwAAAQw"]
[Thu Sep 03 12:53:11.570372 2026] [:error] [pid 3997:tid 139688039937792] [client 35.235.117.59:38436] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/jenkins/.env"] [unique_id "apm0B59yWFkg7dsQCKe4SAAAAEM"]
[Thu Sep 03 12:53:12.504854 2026] [:error] [pid 3941:tid 139687989581568] [client 35.235.117.59:38440] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/gitlab/.env"] [unique_id "apm0CHxCjuXeoAxhvcTXqQAAAQk"]
[Thu Sep 03 12:53:13.952212 2026] [:error] [pid 3912:tid 139687997974272] [client 35.235.117.59:38450] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/github/.env"] [unique_id "apm0CV1PpWlCN_Ixi4YwjgAAAAg"]
[Thu Sep 03 12:53:14.946716 2026] [:error] [pid 3941:tid 139687863691008] [client 35.235.117.59:38466] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/actions/.env"] [unique_id "apm0CnxCjuXeoAxhvcTXrAAAARg"]
[Thu Sep 03 12:53:15.869424 2026] [:error] [pid 3912:tid 139687914047232] [client 35.235.117.59:60592] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/circleci/.env"] [unique_id "apm0C11PpWlCN_Ixi4YwjwAAABI"]
[Thu Sep 03 12:53:16.633445 2026] [:error] [pid 3997:tid 139687989581568] [client 35.235.117.59:60608] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/travis/.env"] [unique_id "apm0DJ9yWFkg7dsQCKe4TQAAAEk"]
[Thu Sep 03 12:53:17.494355 2026] [:error] [pid 3912:tid 139687981188864] [client 35.235.117.59:60612] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/buildkite/.env"] [unique_id "apm0DV1PpWlCN_Ixi4YwkAAAAAo"]
[Thu Sep 03 12:53:18.384859 2026] [:error] [pid 3912:tid 139688132331264] [client 35.235.117.59:60620] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mysql/.env"] [unique_id "apm0Dl1PpWlCN_Ixi4YwkQAAAAA"]
[Thu Sep 03 12:53:19.294888 2026] [:error] [pid 3941:tid 139687872083712] [client 35.235.117.59:60632] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/postgres/.env"] [unique_id "apm0D3xCjuXeoAxhvcTXrQAAARc"]
[Thu Sep 03 12:53:20.232055 2026] [:error] [pid 3997:tid 139687972796160] [client 35.235.117.59:60648] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mongodb/.env"] [unique_id "apm0EJ9yWFkg7dsQCKe4VwAAAEs"]
[Thu Sep 03 12:53:21.140436 2026] [:error] [pid 3997:tid 139688031545088] [client 35.235.117.59:60656] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/redis/.env"] [unique_id "apm0EZ9yWFkg7dsQCKe4WAAAAEQ"]
[Thu Sep 03 12:53:22.027391 2026] [:error] [pid 3997:tid 139687947618048] [client 35.235.117.59:60670] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/elasticsearch/.env"] [unique_id "apm0Ep9yWFkg7dsQCKe4WQAAAE4"]
[Thu Sep 03 12:53:22.878855 2026] [:error] [pid 3942:tid 139687956010752] [client 35.235.117.59:60676] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/rabbitmq/.env"] [unique_id "apm0Elc-FajNlOSdCoJ0kAAAAU0"]
[Thu Sep 03 12:53:23.800059 2026] [:error] [pid 3942:tid 139688014759680] [client 35.235.117.59:60690] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/kafka/.env"] [unique_id "apm0E1c-FajNlOSdCoJ0kgAAAUY"]
[Thu Sep 03 12:53:24.714896 2026] [:error] [pid 3997:tid 139687930832640] [client 35.235.117.59:60700] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/queue/.env"] [unique_id "apm0FJ9yWFkg7dsQCKe4XAAAAFA"]
[Thu Sep 03 12:53:25.655687 2026] [:error] [pid 3997:tid 139688123938560] [client 35.235.117.59:44486] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/worker/.env"] [unique_id "apm0FZ9yWFkg7dsQCKe4XgAAAEE"]
[Thu Sep 03 12:53:26.592665 2026] [:error] [pid 3941:tid 139688006366976] [client 35.235.117.59:44494] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/job/.env"] [unique_id "apm0FnxCjuXeoAxhvcTXrwAAAQc"]
[Thu Sep 03 12:53:27.551383 2026] [:error] [pid 3997:tid 139687981188864] [client 35.235.117.59:44510] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/test/.env"] [unique_id "apm0F59yWFkg7dsQCKe4YAAAAEo"]
[Thu Sep 03 12:53:28.370724 2026] [:error] [pid 3997:tid 139687922439936] [client 35.235.117.59:44514] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/qa/.env"] [unique_id "apm0GJ9yWFkg7dsQCKe4YgAAAFE"]
[Thu Sep 03 12:53:29.443860 2026] [:error] [pid 3997:tid 139688039937792] [client 35.235.117.59:44530] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/preview/.env"] [unique_id "apm0GZ9yWFkg7dsQCKe4YwAAAEM"]
[Thu Sep 03 12:53:30.339016 2026] [:error] [pid 3942:tid 139688123938560] [client 35.235.117.59:44540] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/beta/.env"] [unique_id "apm0Glc-FajNlOSdCoJ0kwAAAUE"]
[Thu Sep 03 12:53:31.135476 2026] [:error] [pid 3997:tid 139687947618048] [client 35.235.117.59:44542] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/uat/.env"] [unique_id "apm0G59yWFkg7dsQCKe4ZQAAAE4"]
[Thu Sep 03 12:53:32.756223 2026] [:error] [pid 3997:tid 139688023152384] [client 35.235.117.59:44556] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/stage/.env"] [unique_id "apm0HJ9yWFkg7dsQCKe4aAAAAEU"]
[Thu Sep 03 12:53:33.667244 2026] [:error] [pid 3942:tid 139687972796160] [client 35.235.117.59:44558] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/development/.env"] [unique_id "apm0HVc-FajNlOSdCoJ0lgAAAUs"]
[Thu Sep 03 12:53:34.730181 2026] [:error] [pid 3997:tid 139687888869120] [client 35.235.117.59:44564] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/production/.env"] [unique_id "apm0Hp9yWFkg7dsQCKe4agAAAFU"]
[Thu Sep 03 12:53:35.637006 2026] [:error] [pid 3997:tid 139687997974272] [client 35.235.117.59:35046] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/config/app/.env"] [unique_id "apm0H59yWFkg7dsQCKe4bQAAAEg"]
[Thu Sep 03 12:53:36.598255 2026] [proxy_fcgi:error] [pid 3942:tid 139687939225344] [client 35.235.117.59:35062] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:37.417822 2026] [proxy_fcgi:error] [pid 3912:tid 139688031545088] [client 35.235.117.59:35074] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:38.261322 2026] [proxy_fcgi:error] [pid 3997:tid 139688031545088] [client 35.235.117.59:35082] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:39.097398 2026] [proxy_fcgi:error] [pid 3997:tid 139687989581568] [client 35.235.117.59:35094] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:39.986415 2026] [proxy_fcgi:error] [pid 3997:tid 139687905654528] [client 35.235.117.59:35106] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:40.911080 2026] [proxy_fcgi:error] [pid 3997:tid 139687956010752] [client 35.235.117.59:35110] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:41.753470 2026] [proxy_fcgi:error] [pid 3997:tid 139687930832640] [client 35.235.117.59:35122] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:43.451847 2026] [proxy_fcgi:error] [pid 3997:tid 139687872083712] [client 35.235.117.59:35136] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:44.364413 2026] [proxy_fcgi:error] [pid 3997:tid 139688115545856] [client 35.235.117.59:35148] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:45.182525 2026] [proxy_fcgi:error] [pid 3941:tid 139687939225344] [client 35.235.117.59:43068] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:52.362218 2026] [proxy_fcgi:error] [pid 3997:tid 139687897261824] [client 35.235.117.59:43140] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:53.244814 2026] [proxy_fcgi:error] [pid 3997:tid 139687981188864] [client 35.235.117.59:43146] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:54.194252 2026] [proxy_fcgi:error] [pid 3912:tid 139687914047232] [client 35.235.117.59:43158] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:55.090056 2026] [proxy_fcgi:error] [pid 3997:tid 139687989581568] [client 35.235.117.59:34464] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:55.933189 2026] [proxy_fcgi:error] [pid 3997:tid 139688039937792] [client 35.235.117.59:34472] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:56.690053 2026] [proxy_fcgi:error] [pid 3997:tid 139687956010752] [client 35.235.117.59:34486] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:53:59.089731 2026] [:error] [pid 3942:tid 139688039937792] [client 35.235.117.59:34498] [client 35.235.117.59] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.pesema.com"] [uri "/webroot/index.php/_environment"] [unique_id "apm0N1c-FajNlOSdCoJ0vgAAAUM"]
[Thu Sep 03 12:53:59.904260 2026] [:error] [pid 3997:tid 139687939225344] [client 35.235.117.59:34508] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/mail/phpinfo.php"] [unique_id "apm0N59yWFkg7dsQCKe4xQAAAE8"]
[Thu Sep 03 12:54:00.683212 2026] [:error] [pid 3942:tid 139687956010752] [client 35.235.117.59:34520] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cpanel/phpinfo.php"] [unique_id "apm0OFc-FajNlOSdCoJ0wAAAAU0"]
[Thu Sep 03 12:54:01.448232 2026] [:error] [pid 3997:tid 139687997974272] [client 35.235.117.59:34522] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/hosting/phpinfo.php"] [unique_id "apm0OZ9yWFkg7dsQCKe4ygAAAEg"]
[Thu Sep 03 12:54:02.221416 2026] [:error] [pid 3941:tid 139688115545856] [client 35.235.117.59:34526] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/webmail/phpinfo.php"] [unique_id "apm0OnxCjuXeoAxhvcTXzAAAAQI"]
[Thu Sep 03 12:54:03.042547 2026] [:error] [pid 3941:tid 139687989581568] [client 35.235.117.59:34540] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/smtp/phpinfo.php"] [unique_id "apm0O3xCjuXeoAxhvcTXzwAAAQk"]
[Thu Sep 03 12:54:03.863293 2026] [:error] [pid 3997:tid 139687905654528] [client 35.235.117.59:34546] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php.bak"] [unique_id "apm0O59yWFkg7dsQCKe4zgAAAFM"]
[Thu Sep 03 12:54:04.606891 2026] [:error] [pid 3912:tid 139688132331264] [client 35.235.117.59:34558] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php.old"] [unique_id "apm0PF1PpWlCN_Ixi4YwswAAAAA"]
[Thu Sep 03 12:54:05.413683 2026] [:error] [pid 3997:tid 139687872083712] [client 35.235.117.59:36950] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php~"] [unique_id "apm0PZ9yWFkg7dsQCKe41wAAAFc"]
[Thu Sep 03 12:54:06.811869 2026] [:error] [pid 3997:tid 139687905654528] [client 35.235.117.59:36956] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/info.php.bak"] [unique_id "apm0Pp9yWFkg7dsQCKe43wAAAFM"]
[Thu Sep 03 12:54:07.563067 2026] [:error] [pid 3997:tid 139687989581568] [client 35.235.117.59:36966] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php.save"] [unique_id "apm0P59yWFkg7dsQCKe44QAAAEk"]
[Thu Sep 03 12:54:08.301306 2026] [:error] [pid 3912:tid 139688039937792] [client 35.235.117.59:36970] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/staging/phpinfo.php"] [unique_id "apm0QF1PpWlCN_Ixi4YwuAAAAAM"]
[Thu Sep 03 12:54:09.145841 2026] [:error] [pid 3941:tid 139687956010752] [client 35.235.117.59:36976] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/beta/phpinfo.php"] [unique_id "apm0QXxCjuXeoAxhvcTX3gAAAQ0"]
[Thu Sep 03 12:54:09.975713 2026] [:error] [pid 3942:tid 139688123938560] [client 35.235.117.59:36982] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/uat/phpinfo.php"] [unique_id "apm0QVc-FajNlOSdCoJ00QAAAUE"]
[Thu Sep 03 12:54:10.726750 2026] [:error] [pid 3997:tid 139687972796160] [client 35.235.117.59:36992] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/qa/phpinfo.php"] [unique_id "apm0Qp9yWFkg7dsQCKe46gAAAEs"]
[Thu Sep 03 12:54:11.605188 2026] [:error] [pid 3941:tid 139688031545088] [client 35.235.117.59:36998] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/preview/phpinfo.php"] [unique_id "apm0Q3xCjuXeoAxhvcTX5AAAAQQ"]
[Thu Sep 03 12:54:12.390209 2026] [:error] [pid 3941:tid 139687863691008] [client 35.235.117.59:37004] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/www/phpinfo.php"] [unique_id "apm0RHxCjuXeoAxhvcTX6QAAARg"]
[Thu Sep 03 12:54:13.221043 2026] [:error] [pid 3941:tid 139688014759680] [client 35.235.117.59:37010] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/htdocs/phpinfo.php"] [unique_id "apm0RXxCjuXeoAxhvcTX7wAAAQY"]
[Thu Sep 03 12:54:14.151041 2026] [:error] [pid 3942:tid 139687947618048] [client 35.235.117.59:37016] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/public_html/phpinfo.php"] [unique_id "apm0Rlc-FajNlOSdCoJ01AAAAU4"]
[Thu Sep 03 12:54:15.056512 2026] [:error] [pid 3942:tid 139688039937792] [client 35.235.117.59:37028] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/site/phpinfo.php"] [unique_id "apm0R1c-FajNlOSdCoJ01QAAAUM"]
[Thu Sep 03 12:54:15.901249 2026] [:error] [pid 3997:tid 139687905654528] [client 35.235.117.59:55438] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/docs/phpinfo.php"] [unique_id "apm0R59yWFkg7dsQCKe49QAAAFM"]
[Thu Sep 03 12:54:16.812946 2026] [:error] [pid 3997:tid 139687964403456] [client 35.235.117.59:55446] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "apm0SJ9yWFkg7dsQCKe4-gAAAEw"]
[Thu Sep 03 12:54:17.564794 2026] [:error] [pid 3942:tid 139688115545856] [client 35.235.117.59:55448] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/administrator/phpinfo.php"] [unique_id "apm0SVc-FajNlOSdCoJ02wAAAUI"]
[Thu Sep 03 12:54:18.358269 2026] [:error] [pid 3942:tid 139687863691008] [client 35.235.117.59:55464] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/core/phpinfo.php"] [unique_id "apm0Slc-FajNlOSdCoJ03QAAAVg"]
[Thu Sep 03 12:54:19.088391 2026] [:error] [pid 3997:tid 139688014759680] [client 35.235.117.59:55476] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/includes/phpinfo.php"] [unique_id "apm0S59yWFkg7dsQCKe5AwAAAEY"]
[Thu Sep 03 12:54:19.917358 2026] [:error] [pid 3997:tid 139687914047232] [client 35.235.117.59:55492] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/service-account.json"] [unique_id "apm0S59yWFkg7dsQCKe5CAAAAFI"]
[Thu Sep 03 12:54:20.755697 2026] [:error] [pid 3941:tid 139688031545088] [client 35.235.117.59:55502] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sa.json"] [unique_id "apm0THxCjuXeoAxhvcTX_AAAAQQ"]
[Thu Sep 03 12:54:21.535744 2026] [:error] [pid 3942:tid 139687997974272] [client 35.235.117.59:55518] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gcp-key.json"] [unique_id "apm0TVc-FajNlOSdCoJ05AAAAUg"]
[Thu Sep 03 12:54:22.947232 2026] [:error] [pid 3912:tid 139687872083712] [client 35.235.117.59:55528] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gcp-credentials.json"] [unique_id "apm0Tl1PpWlCN_Ixi4YwxAAAABc"]
[Thu Sep 03 12:54:23.788764 2026] [:error] [pid 3912:tid 139687997974272] [client 35.235.117.59:55530] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gcp-sa.json"] [unique_id "apm0T11PpWlCN_Ixi4YwxQAAAAg"]
[Thu Sep 03 12:54:24.622972 2026] [:error] [pid 3942:tid 139688123938560] [client 35.235.117.59:55534] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/credentials.json"] [unique_id "apm0UFc-FajNlOSdCoJ06wAAAUE"]
[Thu Sep 03 12:54:25.493414 2026] [:error] [pid 3997:tid 139687914047232] [client 35.235.117.59:34504] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/google-credentials.json"] [unique_id "apm0UZ9yWFkg7dsQCKe5FQAAAFI"]
[Thu Sep 03 12:54:26.367456 2026] [:error] [pid 3997:tid 139687897261824] [client 35.235.117.59:34510] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/google-key.json"] [unique_id "apm0Up9yWFkg7dsQCKe5GAAAAFQ"]
[Thu Sep 03 12:54:27.177549 2026] [:error] [pid 3941:tid 139687880476416] [client 35.235.117.59:34524] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/.config/gcloud/application_default_credentials.json"] [unique_id "apm0U3xCjuXeoAxhvcTYAgAAARY"]
[Thu Sep 03 12:54:28.020945 2026] [:error] [pid 3942:tid 139687863691008] [client 35.235.117.59:34532] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/application_default_credentials.json"] [unique_id "apm0VFc-FajNlOSdCoJ08wAAAVg"]
[Thu Sep 03 12:54:28.936133 2026] [:error] [pid 3942:tid 139687972796160] [client 35.235.117.59:34536] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/key.json"] [unique_id "apm0VFc-FajNlOSdCoJ0-AAAAUs"]
[Thu Sep 03 12:54:29.770576 2026] [:error] [pid 3942:tid 139688115545856] [client 35.235.117.59:34552] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/keyfile.json"] [unique_id "apm0VVc-FajNlOSdCoJ0_AAAAUI"]
[Thu Sep 03 12:54:30.559689 2026] [:error] [pid 3912:tid 139688039937792] [client 35.235.117.59:34562] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/firebase-adminsdk.json"] [unique_id "apm0Vl1PpWlCN_Ixi4YwzgAAAAM"]
[Thu Sep 03 12:54:31.537957 2026] [:error] [pid 3997:tid 139688014759680] [client 35.235.117.59:34564] [client 35.235.117.59] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/firebase-key.json"] [unique_id "apm0V59yWFkg7dsQCKe5MAAAAEY"]
[Thu Sep 03 15:52:10.125178 2026] [proxy_fcgi:error] [pid 3941:tid 139687888869120] [client 130.250.189.162:52292] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 16:50:23.967868 2026] [:error] [pid 7808:tid 139688031545088] [client 43.159.149.216:56424] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apnrn3rMkrRk6piprJqacwAAAAQ"]
[Thu Sep 03 16:52:32.346660 2026] [:error] [pid 7899:tid 139687922439936] [client 43.140.247.223:36072] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apnsIO_1xzZCQNiU9VROJQAAAFE"]
[Thu Sep 03 17:35:26.213559 2026] [proxy_fcgi:error] [pid 8730:tid 139688039937792] [client 68.183.236.56:58854] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 17:58:06.113160 2026] [:error] [pid 7899:tid 139687972796160] [client 43.167.157.80:55636] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apn7fu_1xzZCQNiU9VRblwAAAEs"]
[Thu Sep 03 18:20:35.594717 2026] [authz_core:error] [pid 7810:tid 139687964403456] [client 143.244.57.123:50852] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Thu Sep 03 19:06:10.175060 2026] [proxy_fcgi:error] [pid 7899:tid 139688132331264] [client 132.251.135.107:41968] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 19:51:53.236150 2026] [proxy_fcgi:error] [pid 4903:tid 139687863691008] [client 185.198.240.41:32447] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 20:03:49.132855 2026] [:error] [pid 7810:tid 139688123938560] [client 94.154.43.164:20340] [client 94.154.43.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "apoY9a3uUwtypbuudFlwOQAAAUE"]
[Thu Sep 03 20:47:05.985756 2026] [proxy_fcgi:error] [pid 8730:tid 139687989581568] [client 82.72.249.26:47382] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 21:48:49.117401 2026] [:error] [pid 7899:tid 139688006366976] [client 43.165.198.144:57466] [client 43.165.198.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apoxke_1xzZCQNiU9VSNMwAAAEc"]
[Thu Sep 03 22:09:01.379120 2026] [:error] [pid 4933:tid 139687939225344] [client 43.136.86.241:55920] [client 43.136.86.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apo2TZ_YbFru5GFbGUqspQAAAY8"]
[Thu Sep 03 22:46:04.289471 2026] [:error] [pid 7810:tid 139688014759680] [client 43.157.180.116:42492] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apo-_K3uUwtypbuudFmBQQAAAUY"]
[Thu Sep 03 23:55:33.368403 2026] [:error] [pid 4933:tid 139687989581568] [client 104.28.196.54:11258] [client 104.28.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "appPRZ_YbFru5GFbGUrSsQAAAYk"]
[Thu Sep 03 23:55:33.369098 2026] [:error] [pid 4933:tid 139688123938560] [client 2a06:98c0:3600::103:11268] [client 2a06:98c0:3600::103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.production"] [unique_id "appPRZ_YbFru5GFbGUrSsgAAAYE"], referer: https://www.google.com/search?q=pesema.com
[Thu Sep 03 23:55:33.387415 2026] [:error] [pid 4903:tid 139687897261824] [client 2a06:98c0:3600::103:12741] [client 2a06:98c0:3600::103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.backup"] [unique_id "appPRZBBnIzc-NP9i1zQFAAAANQ"], referer: https://www.google.com/search?q=pesema.com
[Thu Sep 03 23:55:33.395566 2026] [:error] [pid 7899:tid 139687897261824] [client 104.28.196.54:13584] [client 104.28.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.dist"] [unique_id "appPRe_1xzZCQNiU9VSW2wAAAFQ"], referer: https://www.google.com/search?q=pesema.com
[Thu Sep 03 23:55:33.410971 2026] [:error] [pid 4933:tid 139688031545088] [client 2a06:98c0:3600::103:9262] [client 2a06:98c0:3600::103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/HEAD"] [unique_id "appPRZ_YbFru5GFbGUrStgAAAYQ"], referer: https://www.google.com/search?q=pesema.com
[Thu Sep 03 23:55:33.417222 2026] [:error] [pid 7899:tid 139687997974272] [client 2a06:98c0:3600::103:12165] [client 2a06:98c0:3600::103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.local"] [unique_id "appPRe_1xzZCQNiU9VSW3AAAAEg"]
[Thu Sep 03 23:55:33.418688 2026] [:error] [pid 4933:tid 139687956010752] [client 104.28.196.54:10335] [client 104.28.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.old"] [unique_id "appPRZ_YbFru5GFbGUrStwAAAY0"]
[Thu Sep 03 23:55:33.441860 2026] [:error] [pid 4933:tid 139688023152384] [client 2a06:98c0:3600::103:12740] [client 2a06:98c0:3600::103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "appPRZ_YbFru5GFbGUrSuAAAAYU"]
[Thu Sep 03 23:55:33.481698 2026] [:error] [pid 4933:tid 139687872083712] [client 104.28.196.54:12303] [client 104.28.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.save"] [unique_id "appPRZ_YbFru5GFbGUrSuwAAAZc"], referer: https://www.google.com/search?q=pesema.com
[Thu Sep 03 23:55:33.485146 2026] [:error] [pid 4933:tid 139687914047232] [client 104.28.196.54:9970] [client 104.28.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.test"] [unique_id "appPRZ_YbFru5GFbGUrSvAAAAZI"]
[Thu Sep 03 23:55:33.487862 2026] [:error] [pid 4903:tid 139688123938560] [client 2a06:98c0:3600::103:10342] [client 2a06:98c0:3600::103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.sample"] [unique_id "appPRZBBnIzc-NP9i1zQFQAAAME"], referer: https://www.google.com/search?q=pesema.com
[Thu Sep 03 23:55:33.496784 2026] [:error] [pid 4903:tid 139687972796160] [client 104.28.196.54:10016] [client 104.28.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.production.local"] [unique_id "appPRZBBnIzc-NP9i1zQFgAAAMs"], referer: https://www.google.com/search?q=pesema.com
[Thu Sep 03 23:55:33.498130 2026] [:error] [pid 4933:tid 139687972796160] [client 104.28.196.54:11720] [client 104.28.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.bak"] [unique_id "appPRZ_YbFru5GFbGUrSvQAAAYs"]
[Thu Sep 03 23:55:33.499475 2026] [:error] [pid 4903:tid 139687997974272] [client 104.28.196.54:14029] [client 104.28.196.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.development.local"] [unique_id "appPRZBBnIzc-NP9i1zQFwAAAMg"]
[Thu Sep 03 23:55:33.952673 2026] [autoindex:error] [pid 4933:tid 139688115545856] [client 104.28.228.55:55785] AH01276: Cannot serve directory /home/pesema/public_html/admin/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://fancy-tooth-3b9d.ih7tfl0f.workers.dev/proxy?modify&proxyUrl=https%3A%2F%2Fpesema.com%2Fadmin
[Thu Sep 03 23:57:37.443031 2026] [authz_core:error] [pid 4967:tid 139687930832640] [client 154.192.113.48:24611] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Fri Sep 04 00:03:34.901413 2026] [:error] [pid 8730:tid 139687872083712] [client 34.178.74.40:26264] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/../../.env"] [unique_id "appRJkI_1Hza4MNR51SEogAAAJc"]
[Fri Sep 04 00:03:34.901813 2026] [:error] [pid 7899:tid 139687997974272] [client 34.178.74.40:26302] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/.env.staging"] [unique_id "appRJu_1xzZCQNiU9VSXUgAAAEg"]
[Fri Sep 04 00:03:34.905117 2026] [:error] [pid 7899:tid 139687897261824] [client 34.178.74.40:26396] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "appRJu_1xzZCQNiU9VSXUQAAAFQ"]
[Fri Sep 04 00:03:34.914404 2026] [:error] [pid 4903:tid 139687989581568] [client 34.178.74.40:26402] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/root/.aws/credentials.backup"] [unique_id "appRJpBBnIzc-NP9i1zQnwAAAMk"]
[Fri Sep 04 00:03:34.915952 2026] [:error] [pid 8730:tid 139687947618048] [client 34.178.74.40:26188] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/.env"] [unique_id "appRJkI_1Hza4MNR51SEpQAAAI4"]
[Fri Sep 04 00:03:34.917346 2026] [:error] [pid 8730:tid 139687972796160] [client 34.178.74.40:26208] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/app/.env"] [unique_id "appRJkI_1Hza4MNR51SEpgAAAIs"]
[Fri Sep 04 00:03:34.918661 2026] [:error] [pid 7899:tid 139687905654528] [client 34.178.74.40:26286] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/.env.development"] [unique_id "appRJu_1xzZCQNiU9VSXVAAAAFM"]
[Fri Sep 04 00:03:34.919327 2026] [:error] [pid 4933:tid 139688039937792] [client 34.178.74.40:26228] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/src/.env"] [unique_id "appRJp_YbFru5GFbGUrU7QAAAYM"]
[Fri Sep 04 00:03:34.920700 2026] [:error] [pid 4933:tid 139687888869120] [client 34.178.74.40:26192] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/root/.env"] [unique_id "appRJp_YbFru5GFbGUrU7gAAAZU"]
[Fri Sep 04 00:03:34.921925 2026] [:error] [pid 7810:tid 139688115545856] [client 34.178.74.40:26242] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "appRJq3uUwtypbuudFmGSgAAAUI"]
[Fri Sep 04 00:03:34.924744 2026] [:error] [pid 8730:tid 139687888869120] [client 34.178.74.40:26258] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fapp/.env"] [unique_id "appRJkI_1Hza4MNR51SEqAAAAJU"]
[Fri Sep 04 00:03:34.929004 2026] [:error] [pid 4933:tid 139687914047232] [client 34.178.74.40:26250] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/../.env"] [unique_id "appRJp_YbFru5GFbGUrU7wAAAZI"]
[Fri Sep 04 00:03:34.953302 2026] [:error] [pid 4967:tid 139687880476416] [client 34.178.74.40:26278] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/.env.local"] [unique_id "appRJl-qnRXNtxh9kJg1gAAAAdY"]
[Fri Sep 04 00:03:34.953573 2026] [:error] [pid 4933:tid 139687939225344] [client 34.178.74.40:26456] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/.env.production"] [unique_id "appRJp_YbFru5GFbGUrU8wAAAY8"]
[Fri Sep 04 00:03:39.735510 2026] [:error] [pid 8730:tid 139687914047232] [client 34.178.74.40:26510] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/home/ubuntu/.env"] [unique_id "appRK0I_1Hza4MNR51SErgAAAJI"]
[Fri Sep 04 00:03:39.737427 2026] [:error] [pid 4967:tid 139688023152384] [client 34.178.74.40:26514] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/app/.env.production"] [unique_id "appRK1-qnRXNtxh9kJg1hAAAAcU"]
[Fri Sep 04 00:03:39.738536 2026] [:error] [pid 8730:tid 139687872083712] [client 34.178.74.40:26524] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/app/.env.local"] [unique_id "appRK0I_1Hza4MNR51SErwAAAJc"]
[Fri Sep 04 00:03:39.740432 2026] [:error] [pid 8730:tid 139688039937792] [client 34.178.74.40:26534] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/var/www/.env"] [unique_id "appRK0I_1Hza4MNR51SEsAAAAIM"]
[Fri Sep 04 00:03:39.741941 2026] [:error] [pid 8730:tid 139687897261824] [client 34.178.74.40:26546] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/var/www/html/.env"] [unique_id "appRK0I_1Hza4MNR51SEsQAAAJQ"]
[Fri Sep 04 00:03:39.742451 2026] [:error] [pid 4933:tid 139687964403456] [client 34.178.74.40:26558] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/usr/src/app/.env"] [unique_id "appRK5_YbFru5GFbGUrU-gAAAYw"]
[Fri Sep 04 00:03:39.784662 2026] [authz_core:error] [pid 8730:tid 139688123938560] [client 34.178.74.40:26630] AH01630: client denied by server configuration: /home/pesema/public_html/@fs
[Fri Sep 04 00:03:44.746173 2026] [:error] [pid 7810:tid 139688031545088] [client 34.178.74.40:14574] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/../../../../../app/.env"] [unique_id "appRMK3uUwtypbuudFmGTwAAAUQ"]
[Fri Sep 04 00:03:44.746646 2026] [:error] [pid 4967:tid 139687922439936] [client 34.178.74.40:14518] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/etc/nginx/nginx.conf"] [unique_id "appRMF-qnRXNtxh9kJg1iQAAAdE"]
[Fri Sep 04 00:03:44.747006 2026] [:error] [pid 7809:tid 139687914047232] [client 34.178.74.40:14598] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/../../../../../root/.env"] [unique_id "appRMBv-7EUWfIIbwpTGFgAAARI"]
[Fri Sep 04 00:03:44.747465 2026] [:error] [pid 4903:tid 139687905654528] [client 34.178.74.40:14588] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "appRMJBBnIzc-NP9i1zQogAAANM"]
[Fri Sep 04 00:03:44.748361 2026] [core:error] [pid 7810:tid 139687905654528] [client 34.178.74.40:14590] AH10244: invalid URI path (/@fs/../../../../../proc/self/environ?raw??)
[Fri Sep 04 00:03:44.748600 2026] [:error] [pid 7810:tid 139687905654528] [client 34.178.74.40:14590] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:raw??" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.pesema.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.pesema.com"] [uri "/proc/self/environ"] [unique_id "appRMK3uUwtypbuudFmGUAAAAVM"]
[Fri Sep 04 00:03:44.750060 2026] [:error] [pid 4903:tid 139687922439936] [client 34.178.74.40:14528] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "appRMJBBnIzc-NP9i1zQowAAANE"]
[Fri Sep 04 00:03:44.752702 2026] [:error] [pid 8730:tid 139687964403456] [client 34.178.74.40:14544] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/etc/apache2/apache2.conf"] [unique_id "appRMEI_1Hza4MNR51SEtgAAAIw"]
[Fri Sep 04 00:03:44.767705 2026] [authz_core:error] [pid 4933:tid 139687972796160] [client 34.178.74.40:14692] AH01630: client denied by server configuration: /home/pesema/public_html/@fs
[Fri Sep 04 00:03:44.772104 2026] [:error] [pid 7810:tid 139687922439936] [client 34.178.74.40:14784] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".ovh.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/home/ubuntu/.ovh.conf"] [unique_id "appRMK3uUwtypbuudFmGUQAAAVE"]
[Fri Sep 04 00:03:44.774491 2026] [:error] [pid 7809:tid 139688039937792] [client 34.178.74.40:14724] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/root/.config/gcloud/credentials.db"] [unique_id "appRMBv-7EUWfIIbwpTGGwAAAQM"]
[Fri Sep 04 00:03:44.775483 2026] [:error] [pid 7809:tid 139687972796160] [client 34.178.74.40:14708] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".ovh.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/root/.ovh.conf"] [unique_id "appRMBv-7EUWfIIbwpTGHAAAAQs"]
[Fri Sep 04 00:03:44.783250 2026] [:error] [pid 4967:tid 139687939225344] [client 34.178.74.40:14560] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "appRMF-qnRXNtxh9kJg1iwAAAc8"]
[Fri Sep 04 00:03:48.902925 2026] [:error] [pid 4933:tid 139687964403456] [client 34.178.74.40:14916] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "appRNJ_YbFru5GFbGUrVDwAAAYw"]
[Fri Sep 04 00:03:48.916540 2026] [:error] [pid 4933:tid 139687956010752] [client 34.178.74.40:14888] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/var/task/.env"] [unique_id "appRNJ_YbFru5GFbGUrVEQAAAY0"]
[Fri Sep 04 00:03:53.460177 2026] [:error] [pid 7810:tid 139688123938560] [client 34.178.74.40:24562] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.docker/.env"] [unique_id "appROa3uUwtypbuudFmGVgAAAUE"]
[Fri Sep 04 00:03:53.460334 2026] [:error] [pid 7809:tid 139687897261824] [client 34.178.74.40:24570] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v2/.env"] [unique_id "appRORv-7EUWfIIbwpTGHwAAARQ"]
[Fri Sep 04 00:03:53.460527 2026] [:error] [pid 7809:tid 139687922439936] [client 34.178.74.40:24576] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env"] [unique_id "appRORv-7EUWfIIbwpTGIAAAARE"]
[Fri Sep 04 00:03:53.460764 2026] [:error] [pid 7810:tid 139687897261824] [client 34.178.74.40:24626] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup"] [unique_id "appROa3uUwtypbuudFmGVwAAAVQ"]
[Fri Sep 04 00:03:53.460874 2026] [:error] [pid 4933:tid 139688023152384] [client 34.178.74.40:24680] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/.env"] [unique_id "appROZ_YbFru5GFbGUrVEwAAAYU"]
[Fri Sep 04 00:03:53.462198 2026] [:error] [pid 4967:tid 139688031545088] [client 34.178.74.40:24668] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.swp"] [unique_id "appROV-qnRXNtxh9kJg1lwAAAcQ"]
[Fri Sep 04 00:03:53.462719 2026] [:error] [pid 7808:tid 139687914047232] [client 34.178.74.40:24702] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/.env"] [unique_id "appROXrMkrRk6piprJrNJgAAABI"]
[Fri Sep 04 00:03:53.462877 2026] [:error] [pid 7899:tid 139688006366976] [client 34.178.74.40:24522] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/img../.env"] [unique_id "appROe_1xzZCQNiU9VSXXAAAAEc"]
[Fri Sep 04 00:03:53.463067 2026] [:error] [pid 8730:tid 139687964403456] [client 34.178.74.40:24718] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin/.env"] [unique_id "appROUI_1Hza4MNR51SEvwAAAIw"]
[Fri Sep 04 00:03:53.463437 2026] [authz_core:error] [pid 7899:tid 139687956010752] [client 34.178.74.40:24666] AH01630: client denied by server configuration: /home/pesema/public_html/env.js
[Fri Sep 04 00:03:53.463593 2026] [:error] [pid 4967:tid 139688123938560] [client 34.178.74.40:24588] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.production"] [unique_id "appROV-qnRXNtxh9kJg1mAAAAcE"]
[Fri Sep 04 00:03:53.463746 2026] [:error] [pid 4967:tid 139687930832640] [client 34.178.74.40:24616] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.bak"] [unique_id "appROV-qnRXNtxh9kJg1lgAAAdA"]
[Fri Sep 04 00:03:53.464791 2026] [:error] [pid 4967:tid 139687964403456] [client 34.178.74.40:24642] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.old"] [unique_id "appROV-qnRXNtxh9kJg1mQAAAcw"]
[Fri Sep 04 00:03:53.465801 2026] [:error] [pid 7899:tid 139687922439936] [client 34.178.74.40:24600] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.staging"] [unique_id "appROe_1xzZCQNiU9VSXXQAAAFE"]
[Fri Sep 04 00:03:53.466486 2026] [:error] [pid 7810:tid 139688115545856] [client 34.178.74.40:24728] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/laravel/.env"] [unique_id "appROa3uUwtypbuudFmGWAAAAUI"]
[Fri Sep 04 00:03:53.466832 2026] [:error] [pid 4903:tid 139687914047232] [client 34.178.74.40:24686] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend/.env"] [unique_id "appROZBBnIzc-NP9i1zQrgAAANI"]
[Fri Sep 04 00:03:53.467664 2026] [:error] [pid 7809:tid 139687997974272] [client 34.178.74.40:24510] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/uploads../.env"] [unique_id "appRORv-7EUWfIIbwpTGIQAAAQg"]
[Fri Sep 04 00:03:53.469039 2026] [:error] [pid 7899:tid 139687872083712] [client 34.178.74.40:24608] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.development"] [unique_id "appROe_1xzZCQNiU9VSXXgAAAFc"]
[Fri Sep 04 00:03:53.470298 2026] [:error] [pid 7899:tid 139687939225344] [client 34.178.74.40:24524] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/assets../.env"] [unique_id "appROe_1xzZCQNiU9VSXXwAAAE8"]
[Fri Sep 04 00:03:53.470512 2026] [:error] [pid 8730:tid 139688031545088] [client 34.178.74.40:24744] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/config/.env"] [unique_id "appROUI_1Hza4MNR51SEwAAAAIQ"]
[Fri Sep 04 00:03:53.471602 2026] [:error] [pid 7899:tid 139687981188864] [client 34.178.74.40:24512] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/_nuxt/../.env"] [unique_id "appROe_1xzZCQNiU9VSXYAAAAEo"]
[Fri Sep 04 00:03:53.473747 2026] [:error] [pid 4933:tid 139687972796160] [client 34.178.74.40:24756] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/docker/.env"] [unique_id "appROZ_YbFru5GFbGUrVFAAAAYs"]
[Fri Sep 04 00:03:53.474041 2026] [:error] [pid 4933:tid 139688006366976] [client 34.178.74.40:24546] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.local"] [unique_id "appROZ_YbFru5GFbGUrVFQAAAYc"]
[Fri Sep 04 00:03:53.474162 2026] [:error] [pid 7899:tid 139687989581568] [client 34.178.74.40:24538] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v1/.env"] [unique_id "appROe_1xzZCQNiU9VSXYQAAAEk"]
[Fri Sep 04 00:03:53.474210 2026] [:error] [pid 7899:tid 139687897261824] [client 34.178.74.40:24658] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.example"] [unique_id "appROe_1xzZCQNiU9VSXYgAAAFQ"]
[Fri Sep 04 00:03:53.475332 2026] [:error] [pid 7899:tid 139688014759680] [client 34.178.74.40:24550] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/images../.env"] [unique_id "appROe_1xzZCQNiU9VSXYwAAAEY"]
[Fri Sep 04 00:03:53.475899 2026] [:error] [pid 7810:tid 139687888869120] [client 34.178.74.40:24778] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/src/.env"] [unique_id "appROa3uUwtypbuudFmGWgAAAVU"]
[Fri Sep 04 00:03:53.476425 2026] [:error] [pid 7810:tid 139687930832640] [client 34.178.74.40:24766] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/core/.env"] [unique_id "appROa3uUwtypbuudFmGWQAAAVA"]
[Fri Sep 04 00:03:53.490599 2026] [:error] [pid 8730:tid 139687863691008] [client 34.178.74.40:24788] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/server/.env"] [unique_id "appROUI_1Hza4MNR51SEwQAAAJg"]
[Fri Sep 04 00:03:53.490781 2026] [:error] [pid 7810:tid 139687863691008] [client 34.178.74.40:24780] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/frontend/.env"] [unique_id "appROa3uUwtypbuudFmGWwAAAVg"]
[Fri Sep 04 00:03:53.493282 2026] [:error] [pid 4967:tid 139688115545856] [client 34.178.74.40:24796] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/web/.env"] [unique_id "appROV-qnRXNtxh9kJg1mgAAAcI"]
[Fri Sep 04 00:03:59.034145 2026] [:error] [pid 4967:tid 139687888869120] [client 34.178.74.40:24812] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/public/.env"] [unique_id "appRP1-qnRXNtxh9kJg1qgAAAdU"]
[Fri Sep 04 00:03:59.034337 2026] [:error] [pid 8730:tid 139688115545856] [client 34.178.74.40:24824] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "appRP0I_1Hza4MNR51SExQAAAII"]
[Fri Sep 04 00:03:59.034460 2026] [:error] [pid 7810:tid 139687914047232] [client 34.178.74.40:24826] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/HEAD"] [unique_id "appRP63uUwtypbuudFmGYAAAAVI"]
[Fri Sep 04 00:03:59.039526 2026] [:error] [pid 7809:tid 139687930832640] [client 34.178.74.40:24902] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.github/.env"] [unique_id "appRPxv-7EUWfIIbwpTGKAAAARA"]
[Fri Sep 04 00:04:03.679182 2026] [authz_core:error] [pid 7810:tid 139687880476416] [client 34.178.74.40:10298] AH01630: client denied by server configuration: /home/pesema/public_html/config.js
[Fri Sep 04 00:04:03.687577 2026] [authz_core:error] [pid 7809:tid 139687939225344] [client 34.178.74.40:10462] AH01630: client denied by server configuration: /home/pesema/public_html/key.json
[Fri Sep 04 00:04:03.703018 2026] [authz_core:error] [pid 4903:tid 139688132331264] [client 34.178.74.40:10454] AH01630: client denied by server configuration: /home/pesema/public_html/google-credentials.json
[Fri Sep 04 00:04:09.172851 2026] [:error] [pid 7899:tid 139687930832640] [client 34.178.74.40:10598] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp-config.php.bak"] [unique_id "appRSe_1xzZCQNiU9VSXbwAAAFA"]
[Fri Sep 04 00:04:09.176212 2026] [:error] [pid 4903:tid 139688031545088] [client 34.178.74.40:10652] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp-config.php"] [unique_id "appRSZBBnIzc-NP9i1zQ0QAAAMQ"]
[Fri Sep 04 00:04:09.178522 2026] [:error] [pid 7808:tid 139687922439936] [client 34.178.74.40:10638] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/privatekey.key"] [unique_id "appRSXrMkrRk6piprJrNNwAAABE"]
[Fri Sep 04 00:04:09.176165 2026] [:error] [pid 4903:tid 139687947618048] [client 34.178.74.40:10628] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/config.php.bak"] [unique_id "appRSZBBnIzc-NP9i1zQ0AAAAM4"]
[Fri Sep 04 00:04:09.182862 2026] [proxy_fcgi:error] [pid 4967:tid 139687981188864] [client 34.178.74.40:10622] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 00:04:09.188771 2026] [:error] [pid 7809:tid 139687972796160] [client 34.178.74.40:10572] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/server.key"] [unique_id "appRSRv-7EUWfIIbwpTGMwAAAQs"]
[Fri Sep 04 00:04:09.194475 2026] [:error] [pid 7808:tid 139687888869120] [client 34.178.74.40:10608] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp-config.php.old"] [unique_id "appRSXrMkrRk6piprJrNOAAAABU"]
[Fri Sep 04 00:04:14.488712 2026] [authz_core:error] [pid 4967:tid 139687964403456] [client 34.178.74.40:59468] AH01630: client denied by server configuration: /home/pesema/public_html/api
[Fri Sep 04 00:04:14.499217 2026] [:error] [pid 7810:tid 139687981188864] [client 34.178.74.40:59686] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.js"] [unique_id "appRTq3uUwtypbuudFmGaQAAAUo"]
[Fri Sep 04 00:04:14.500562 2026] [authz_core:error] [pid 4967:tid 139688031545088] [client 34.178.74.40:59454] AH01630: client denied by server configuration: /home/pesema/public_html/graphql
[Fri Sep 04 00:04:14.501764 2026] [:error] [pid 4967:tid 139687914047232] [client 34.178.74.40:59590] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.openclaw/.env"] [unique_id "appRTl-qnRXNtxh9kJg1wgAAAdI"]
[Fri Sep 04 00:04:14.506385 2026] [:error] [pid 4933:tid 139687888869120] [client 34.178.74.40:59524] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.hermes/.env"] [unique_id "appRTp_YbFru5GFbGUrVUAAAAZU"]
[Fri Sep 04 00:04:19.431908 2026] [authz_core:error] [pid 7899:tid 139687880476416] [client 34.178.74.40:59732] AH01630: client denied by server configuration: /home/pesema/public_html/metrics
[Fri Sep 04 00:04:19.436386 2026] [authz_core:error] [pid 8730:tid 139687914047232] [client 34.178.74.40:59826] AH01630: client denied by server configuration: /home/pesema/public_html/.gradle
[Fri Sep 04 00:04:19.440768 2026] [proxy_fcgi:error] [pid 7809:tid 139687897261824] [client 34.178.74.40:59774] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 00:04:19.447898 2026] [:error] [pid 8730:tid 139687981188864] [client 34.178.74.40:59758] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.htpasswd"] [unique_id "appRU0I_1Hza4MNR51SE7wAAAIo"]
[Fri Sep 04 00:04:19.448712 2026] [:error] [pid 4903:tid 139688023152384] [client 34.178.74.40:59836] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env~"] [unique_id "appRU5BBnIzc-NP9i1zQ1AAAAMU"]
[Fri Sep 04 00:04:19.450869 2026] [:error] [pid 7899:tid 139687964403456] [client 34.178.74.40:59830] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.prod"] [unique_id "appRU-_1xzZCQNiU9VSXewAAAEw"]
[Fri Sep 04 00:04:19.457337 2026] [proxy_fcgi:error] [pid 4903:tid 139687897261824] [client 34.178.74.40:59784] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 00:04:19.460856 2026] [:error] [pid 4933:tid 139687981188864] [client 34.178.74.40:59848] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/_next/../.env"] [unique_id "appRU5_YbFru5GFbGUrVYQAAAYo"]
[Fri Sep 04 00:04:19.479210 2026] [autoindex:error] [pid 4933:tid 139687914047232] [client 34.178.74.40:59856] AH01276: Cannot serve directory /home/pesema/public_html/admin/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.pesema.com/admin
[Fri Sep 04 00:04:24.674848 2026] [:error] [pid 7808:tid 139687888869120] [client 34.178.74.40:18026] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/_next/static/../.env"] [unique_id "appRWHrMkrRk6piprJrNRAAAABU"]
[Fri Sep 04 00:04:24.677259 2026] [:error] [pid 4967:tid 139687939225344] [client 34.178.74.40:18190] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/config/master.key"] [unique_id "appRWF-qnRXNtxh9kJg1xwAAAc8"]
[Fri Sep 04 00:04:24.679837 2026] [:error] [pid 7808:tid 139687872083712] [client 34.178.74.40:18132] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.vault"] [unique_id "appRWHrMkrRk6piprJrNRQAAABc"]
[Fri Sep 04 00:04:24.685767 2026] [authz_core:error] [pid 4903:tid 139687939225344] [client 34.178.74.40:18314] AH01630: client denied by server configuration: /home/pesema/public_html/config.env
[Fri Sep 04 00:04:24.700261 2026] [:error] [pid 7808:tid 139687880476416] [client 34.178.74.40:18160] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.anthropic"] [unique_id "appRWHrMkrRk6piprJrNSwAAABY"]
[Fri Sep 04 00:04:24.719236 2026] [authz_core:error] [pid 4967:tid 139687872083712] [client 34.178.74.40:18258] AH01630: client denied by server configuration: /home/pesema/public_html/.azure
[Fri Sep 04 00:04:24.723979 2026] [:error] [pid 8730:tid 139688031545088] [client 34.178.74.40:18158] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.openai"] [unique_id "appRWEI_1Hza4MNR51SE9wAAAIQ"]
[Fri Sep 04 00:04:30.048507 2026] [:error] [pid 7808:tid 139687947618048] [client 34.178.74.40:18346] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/.env.local"] [unique_id "appRXnrMkrRk6piprJrNUgAAAA4"]
[Fri Sep 04 00:04:30.048799 2026] [:error] [pid 7808:tid 139687964403456] [client 34.178.74.40:18362] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/.env.production"] [unique_id "appRXnrMkrRk6piprJrNUwAAAAw"]
[Fri Sep 04 00:04:30.049836 2026] [:error] [pid 7810:tid 139687997974272] [client 34.178.74.40:18366] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/client/.env"] [unique_id "appRXq3uUwtypbuudFmGdgAAAUg"]
[Fri Sep 04 00:04:30.050277 2026] [:error] [pid 7810:tid 139687981188864] [client 34.178.74.40:18378] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backup/.env"] [unique_id "appRXq3uUwtypbuudFmGdwAAAUo"]
[Fri Sep 04 00:04:30.051387 2026] [:error] [pid 7810:tid 139687956010752] [client 34.178.74.40:18392] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dev/.env"] [unique_id "appRXq3uUwtypbuudFmGeAAAAU0"]
[Fri Sep 04 00:04:30.052007 2026] [:error] [pid 7809:tid 139688006366976] [client 34.178.74.40:18410] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/production/.env"] [unique_id "appRXhv-7EUWfIIbwpTGSQAAAQc"]
[Fri Sep 04 00:04:30.052549 2026] [:error] [pid 4933:tid 139688006366976] [client 34.178.74.40:18394] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/staging/.env"] [unique_id "appRXp_YbFru5GFbGUrVdwAAAYc"]
[Fri Sep 04 00:04:30.053151 2026] [:error] [pid 7810:tid 139688006366976] [client 34.178.74.40:18420] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.docker"] [unique_id "appRXq3uUwtypbuudFmGeQAAAUc"]
[Fri Sep 04 00:04:34.848855 2026] [authz_core:error] [pid 8730:tid 139687863691008] [client 34.178.74.40:2712] AH01630: client denied by server configuration: /home/pesema/public_html/app
[Fri Sep 04 00:04:34.857091 2026] [authz_core:error] [pid 7809:tid 139687922439936] [client 34.178.74.40:2612] AH01630: client denied by server configuration: /home/pesema/public_html/keyfile.json
[Fri Sep 04 00:04:39.769087 2026] [:error] [pid 4903:tid 139688014759680] [client 34.178.74.40:2996] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/web.config"] [unique_id "appRZ5BBnIzc-NP9i1zQ-QAAAMY"]
[Fri Sep 04 00:04:39.770373 2026] [authz_core:error] [pid 4903:tid 139687880476416] [client 34.178.74.40:3008] AH01630: client denied by server configuration: /home/pesema/public_html/auth.json
[Fri Sep 04 00:04:45.285346 2026] [:error] [pid 4933:tid 139687897261824] [client 34.178.74.40:11970] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/rclone.conf"] [unique_id "appRbZ_YbFru5GFbGUrVlQAAAZQ"]
[Fri Sep 04 00:04:45.286148 2026] [:error] [pid 4903:tid 139687947618048] [client 34.178.74.40:11998] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/localhost.key"] [unique_id "appRbZBBnIzc-NP9i1zRAQAAAM4"]
[Fri Sep 04 00:04:45.286428 2026] [:error] [pid 7899:tid 139688014759680] [client 34.178.74.40:12010] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/ssl/localhost.key"] [unique_id "appRbe_1xzZCQNiU9VSXmAAAAEY"]
[Fri Sep 04 00:04:45.295685 2026] [authz_core:error] [pid 4933:tid 139688006366976] [client 34.178.74.40:12228] AH01630: client denied by server configuration: /home/pesema/public_html/__debug__
[Fri Sep 04 00:04:45.307434 2026] [:error] [pid 4933:tid 139687989581568] [client 34.178.74.40:12084] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/host.key"] [unique_id "appRbZ_YbFru5GFbGUrVoQAAAYk"]
[Fri Sep 04 00:04:45.308528 2026] [:error] [pid 4903:tid 139688014759680] [client 34.178.74.40:12034] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/configuration.php.bak"] [unique_id "appRbZBBnIzc-NP9i1zRBQAAAMY"]
[Fri Sep 04 00:04:45.311373 2026] [:error] [pid 4967:tid 139688014759680] [client 34.178.74.40:11988] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/ssl/server.key"] [unique_id "appRbV-qnRXNtxh9kJg15QAAAcY"]
[Fri Sep 04 00:04:50.171934 2026] [:error] [pid 7810:tid 139687930832640] [client 34.178.74.40:12268] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.svn/entries"] [unique_id "appRcq3uUwtypbuudFmGhwAAAVA"]
[Fri Sep 04 00:04:50.172389 2026] [authz_core:error] [pid 7809:tid 139687956010752] [client 34.178.74.40:12264] AH01630: client denied by server configuration: /home/pesema/public_html/openapi.json
[Fri Sep 04 00:04:50.177805 2026] [:error] [pid 7809:tid 139687981188864] [client 34.178.74.40:12344] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/aws/.env"] [unique_id "appRchv-7EUWfIIbwpTGZAAAAQo"]
[Fri Sep 04 00:04:50.178851 2026] [:error] [pid 4933:tid 139687888869120] [client 34.178.74.40:12378] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/.aws/credentials.old"] [unique_id "appRcp_YbFru5GFbGUrVsQAAAZU"]
[Fri Sep 04 00:04:50.179574 2026] [:error] [pid 8730:tid 139687972796160] [client 34.178.74.40:12358] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/aws/.env.production"] [unique_id "appRckI_1Hza4MNR51SFFAAAAIs"]
[Fri Sep 04 00:04:50.180456 2026] [:error] [pid 4933:tid 139687972796160] [client 34.178.74.40:12366] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/.aws/credentials.bak"] [unique_id "appRcp_YbFru5GFbGUrVswAAAYs"]
[Fri Sep 04 00:04:55.106011 2026] [:error] [pid 7899:tid 139687964403456] [client 34.178.74.40:9906] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/var/www/html/.env"] [unique_id "appRd-_1xzZCQNiU9VSXngAAAEw"]
[Fri Sep 04 00:04:55.106225 2026] [:error] [pid 7899:tid 139687956010752] [client 34.178.74.40:10002] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend-api/.env"] [unique_id "appRd-_1xzZCQNiU9VSXnwAAAE0"]
[Fri Sep 04 00:04:55.107092 2026] [:error] [pid 4933:tid 139687897261824] [client 34.178.74.40:10022] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/services/.env"] [unique_id "appRd5_YbFru5GFbGUrVwgAAAZQ"]
[Fri Sep 04 00:04:55.107490 2026] [:error] [pid 8730:tid 139687972796160] [client 34.178.74.40:10012] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/stage/.env"] [unique_id "appRd0I_1Hza4MNR51SFHgAAAIs"]
[Fri Sep 04 00:04:55.107545 2026] [:error] [pid 8730:tid 139687947618048] [client 34.178.74.40:9976] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/prod/.env"] [unique_id "appRd0I_1Hza4MNR51SFHwAAAI4"]
[Fri Sep 04 00:04:55.107680 2026] [:error] [pid 4903:tid 139688115545856] [client 34.178.74.40:10050] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/test/.env"] [unique_id "appRd5BBnIzc-NP9i1zRFAAAAMI"]
[Fri Sep 04 00:04:55.108224 2026] [:error] [pid 4903:tid 139687872083712] [client 34.178.74.40:10010] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/development/.env"] [unique_id "appRd5BBnIzc-NP9i1zRFQAAANc"]
[Fri Sep 04 00:04:55.108294 2026] [:error] [pid 4933:tid 139687880476416] [client 34.178.74.40:10074] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend/.env.production"] [unique_id "appRd5_YbFru5GFbGUrVwwAAAZY"]
[Fri Sep 04 00:04:55.108924 2026] [:error] [pid 4933:tid 139687914047232] [client 34.178.74.40:10076] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/frontend/.env.local"] [unique_id "appRd5_YbFru5GFbGUrVxAAAAZI"]
[Fri Sep 04 00:04:55.109111 2026] [:error] [pid 8730:tid 139687897261824] [client 34.178.74.40:10114] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/frontend/.env.production"] [unique_id "appRd0I_1Hza4MNR51SFIAAAAJQ"]
[Fri Sep 04 00:04:55.109152 2026] [:error] [pid 4933:tid 139687956010752] [client 34.178.74.40:10100] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend/api/.env"] [unique_id "appRd5_YbFru5GFbGUrVxQAAAY0"]
[Fri Sep 04 00:04:55.110097 2026] [:error] [pid 8730:tid 139688123938560] [client 34.178.74.40:10072] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/backend/.env"] [unique_id "appRd0I_1Hza4MNR51SFIQAAAIE"]
[Fri Sep 04 00:04:55.110728 2026] [:error] [pid 4933:tid 139687939225344] [client 34.178.74.40:10116] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend/.env.local"] [unique_id "appRd5_YbFru5GFbGUrVxgAAAY8"]
[Fri Sep 04 00:04:55.111114 2026] [:error] [pid 4933:tid 139688014759680] [client 34.178.74.40:10078] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/api/.env"] [unique_id "appRd5_YbFru5GFbGUrVxwAAAYY"]
[Fri Sep 04 00:04:55.113197 2026] [:error] [pid 7808:tid 139688039937792] [client 34.178.74.40:10038] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/node/.env"] [unique_id "appRd3rMkrRk6piprJrNegAAAAM"]
[Fri Sep 04 00:04:55.114329 2026] [:error] [pid 7899:tid 139687888869120] [client 34.178.74.40:9922] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/email/.env"] [unique_id "appRd-_1xzZCQNiU9VSXoQAAAFU"]
[Fri Sep 04 00:04:55.115418 2026] [:error] [pid 7810:tid 139687997974272] [client 34.178.74.40:9960] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mail/.env"] [unique_id "appRd63uUwtypbuudFmGiwAAAUg"]
[Fri Sep 04 00:04:55.116519 2026] [:error] [pid 7808:tid 139687897261824] [client 34.178.74.40:9968] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/stripe/.env"] [unique_id "appRd3rMkrRk6piprJrNewAAABQ"]
[Fri Sep 04 00:04:55.116619 2026] [:error] [pid 8730:tid 139687981188864] [client 34.178.74.40:9908] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sendgrid/.env"] [unique_id "appRd0I_1Hza4MNR51SFIwAAAIo"]
[Fri Sep 04 00:04:55.116841 2026] [:error] [pid 8730:tid 139687872083712] [client 34.178.74.40:9886] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/var/www/.env"] [unique_id "appRd0I_1Hza4MNR51SFJAAAAJc"]
[Fri Sep 04 00:04:55.118301 2026] [:error] [pid 7809:tid 139688115545856] [client 34.178.74.40:9974] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/back/.env"] [unique_id "appRdxv-7EUWfIIbwpTGaQAAAQI"]
[Fri Sep 04 00:04:55.118862 2026] [:error] [pid 4933:tid 139688115545856] [client 34.178.74.40:10058] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/internal/.env"] [unique_id "appRd5_YbFru5GFbGUrVyQAAAYI"]
[Fri Sep 04 00:04:55.120244 2026] [:error] [pid 4933:tid 139687905654528] [client 34.178.74.40:10056] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/private/.env"] [unique_id "appRd5_YbFru5GFbGUrVygAAAZM"]
[Fri Sep 04 00:05:00.283675 2026] [:error] [pid 4933:tid 139687956010752] [client 34.178.74.40:10142] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/server/.env.local"] [unique_id "appRfJ_YbFru5GFbGUrVzgAAAY0"]
[Fri Sep 04 00:05:00.283788 2026] [:error] [pid 8730:tid 139687981188864] [client 34.178.74.40:10134] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/src/api/.env"] [unique_id "appRfEI_1Hza4MNR51SFLAAAAIo"]
[Fri Sep 04 00:05:00.284079 2026] [:error] [pid 4933:tid 139687939225344] [client 34.178.74.40:10118] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/src/.env.local"] [unique_id "appRfJ_YbFru5GFbGUrVzwAAAY8"]
[Fri Sep 04 00:05:00.285467 2026] [:error] [pid 4933:tid 139687872083712] [client 34.178.74.40:10184] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/apps/api/.env"] [unique_id "appRfJ_YbFru5GFbGUrV0AAAAZc"]
[Fri Sep 04 00:05:00.285956 2026] [:error] [pid 8730:tid 139687872083712] [client 34.178.74.40:10152] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/server/.env.production"] [unique_id "appRfEI_1Hza4MNR51SFLQAAAJc"]
[Fri Sep 04 00:05:00.286057 2026] [:error] [pid 4967:tid 139687914047232] [client 34.178.74.40:10174] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin/.env.production"] [unique_id "appRfF-qnRXNtxh9kJg17wAAAdI"]
[Fri Sep 04 00:05:00.286685 2026] [:error] [pid 4933:tid 139687981188864] [client 34.178.74.40:10206] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/database/.env"] [unique_id "appRfJ_YbFru5GFbGUrV0QAAAYo"]
[Fri Sep 04 00:05:00.286792 2026] [:error] [pid 7809:tid 139688039937792] [client 34.178.74.40:10230] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.testing"] [unique_id "appRfBv-7EUWfIIbwpTGbAAAAQM"]
[Fri Sep 04 00:05:00.287346 2026] [:error] [pid 4933:tid 139688006366976] [client 34.178.74.40:10160] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin/.env.local"] [unique_id "appRfJ_YbFru5GFbGUrV0gAAAYc"]
[Fri Sep 04 00:05:00.288039 2026] [:error] [pid 4933:tid 139688014759680] [client 34.178.74.40:10130] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/src/.env.production"] [unique_id "appRfJ_YbFru5GFbGUrV0wAAAYY"]
[Fri Sep 04 00:05:00.289664 2026] [:error] [pid 7808:tid 139687964403456] [client 34.178.74.40:10236] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/credentials.ini"] [unique_id "appRfHrMkrRk6piprJrNfgAAAAw"]
[Fri Sep 04 00:05:00.291748 2026] [:error] [pid 4933:tid 139688115545856] [client 34.178.74.40:10200] [client 34.178.74.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/apps/backend/.env"] [unique_id "appRfJ_YbFru5GFbGUrV1QAAAYI"]
[Fri Sep 04 02:05:18.448055 2026] [:error] [pid 4967:tid 139688039937792] [client 49.51.166.228:36708] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apptrl-qnRXNtxh9kJhDWgAAAcM"]
[Fri Sep 04 02:13:05.178520 2026] [:error] [pid 4933:tid 139687880476416] [client 35.236.3.150:51328] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "appvgZ_YbFru5GFbGUr5ZAAAAZY"]
[Fri Sep 04 02:13:06.790185 2026] [:error] [pid 7810:tid 139687905654528] [client 35.236.3.150:51346] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env"] [unique_id "appvgq3uUwtypbuudFmPJgAAAVM"]
[Fri Sep 04 02:13:07.513250 2026] [:error] [pid 7899:tid 139688115545856] [client 35.236.3.150:51358] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.local"] [unique_id "appvg-_1xzZCQNiU9VSfLAAAAEI"]
[Fri Sep 04 02:13:08.333743 2026] [:error] [pid 8730:tid 139688123938560] [client 35.236.3.150:51360] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.production"] [unique_id "appvhEI_1Hza4MNR51SaxwAAAIE"]
[Fri Sep 04 02:13:09.217073 2026] [:error] [pid 4967:tid 139688006366976] [client 35.236.3.150:51362] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.staging"] [unique_id "appvhV-qnRXNtxh9kJhEhgAAAcc"]
[Fri Sep 04 02:13:10.111175 2026] [:error] [pid 4967:tid 139688123938560] [client 35.236.3.150:51374] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.development"] [unique_id "appvhl-qnRXNtxh9kJhEhwAAAcE"]
[Fri Sep 04 02:13:10.930327 2026] [:error] [pid 7810:tid 139688123938560] [client 35.236.3.150:51376] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.test"] [unique_id "appvhq3uUwtypbuudFmPKAAAAUE"]
[Fri Sep 04 02:13:11.749175 2026] [:error] [pid 4903:tid 139687872083712] [client 35.236.3.150:49704] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.remote"] [unique_id "appvh5BBnIzc-NP9i1zZ0QAAANc"]
[Fri Sep 04 02:13:12.555992 2026] [:error] [pid 4933:tid 139687914047232] [client 35.236.3.150:49712] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.bak"] [unique_id "appviJ_YbFru5GFbGUr5bwAAAZI"]
[Fri Sep 04 02:13:13.445775 2026] [:error] [pid 7808:tid 139687972796160] [client 35.236.3.150:49720] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup"] [unique_id "appviXrMkrRk6piprJrXiQAAAAs"]
[Fri Sep 04 02:13:14.435571 2026] [:error] [pid 8730:tid 139687930832640] [client 35.236.3.150:49728] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.save"] [unique_id "appvikI_1Hza4MNR51Sa0gAAAJA"]
[Fri Sep 04 02:13:15.269268 2026] [:error] [pid 7810:tid 139687972796160] [client 35.236.3.150:49736] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.old"] [unique_id "appvi63uUwtypbuudFmPKQAAAUs"]
[Fri Sep 04 02:13:16.758317 2026] [:error] [pid 4933:tid 139688023152384] [client 35.236.3.150:49738] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.sample"] [unique_id "appvjJ_YbFru5GFbGUr5eAAAAYU"]
[Fri Sep 04 02:13:17.524057 2026] [:error] [pid 4933:tid 139688039937792] [client 35.236.3.150:49752] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.example"] [unique_id "appvjZ_YbFru5GFbGUr5egAAAYM"]
[Fri Sep 04 02:13:18.222541 2026] [:error] [pid 8730:tid 139688132331264] [client 35.236.3.150:49768] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dev"] [unique_id "appvjkI_1Hza4MNR51Sa0wAAAIA"]
[Fri Sep 04 02:13:18.932785 2026] [:error] [pid 4933:tid 139687888869120] [client 35.236.3.150:49772] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.prod"] [unique_id "appvjp_YbFru5GFbGUr5fAAAAZU"]
[Fri Sep 04 02:13:19.767511 2026] [:error] [pid 4967:tid 139688014759680] [client 35.236.3.150:49778] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.stage"] [unique_id "appvj1-qnRXNtxh9kJhEjAAAAcY"]
[Fri Sep 04 02:13:20.501553 2026] [:error] [pid 4903:tid 139688006366976] [client 35.236.3.150:49794] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.ci"] [unique_id "appvkJBBnIzc-NP9i1zZ1AAAAMc"]
[Fri Sep 04 02:13:21.297575 2026] [:error] [pid 4933:tid 139688115545856] [client 35.236.3.150:49800] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.docker"] [unique_id "appvkZ_YbFru5GFbGUr5fwAAAYI"]
[Fri Sep 04 02:13:22.025788 2026] [:error] [pid 4933:tid 139687880476416] [client 35.236.3.150:41808] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.live"] [unique_id "appvkp_YbFru5GFbGUr5gQAAAZY"]
[Fri Sep 04 02:13:22.863717 2026] [:error] [pid 8730:tid 139687880476416] [client 35.236.3.150:41822] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.preprod"] [unique_id "appvkkI_1Hza4MNR51Sa1wAAAJY"]
[Fri Sep 04 02:13:23.674983 2026] [:error] [pid 8730:tid 139687922439936] [client 35.236.3.150:41828] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.uat"] [unique_id "appvk0I_1Hza4MNR51Sa2gAAAJE"]
[Fri Sep 04 02:13:24.436024 2026] [:error] [pid 8730:tid 139687947618048] [client 35.236.3.150:41840] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dist"] [unique_id "appvlEI_1Hza4MNR51Sa2wAAAI4"]
[Fri Sep 04 02:13:25.146698 2026] [:error] [pid 8730:tid 139688031545088] [client 35.236.3.150:41854] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.swp"] [unique_id "appvlUI_1Hza4MNR51Sa3QAAAIQ"]
[Fri Sep 04 02:13:25.997342 2026] [:error] [pid 4933:tid 139687956010752] [client 35.236.3.150:41866] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env~"] [unique_id "appvlZ_YbFru5GFbGUr5gwAAAY0"]
[Fri Sep 04 02:13:26.717833 2026] [:error] [pid 8730:tid 139688132331264] [client 35.236.3.150:41870] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env1"] [unique_id "appvlkI_1Hza4MNR51Sa4QAAAIA"]
[Fri Sep 04 02:13:28.212884 2026] [:error] [pid 7808:tid 139687922439936] [client 35.236.3.150:41876] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env2"] [unique_id "appvmHrMkrRk6piprJrXlAAAABE"]
[Fri Sep 04 02:13:29.055740 2026] [:error] [pid 8730:tid 139687888869120] [client 35.236.3.150:41888] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env_copy"] [unique_id "appvmUI_1Hza4MNR51Sa5gAAAJU"]
[Fri Sep 04 02:13:29.888944 2026] [:error] [pid 4967:tid 139687947618048] [client 35.236.3.150:41900] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.txt"] [unique_id "appvmV-qnRXNtxh9kJhEkwAAAc4"]
[Fri Sep 04 02:13:30.708255 2026] [:error] [pid 4933:tid 139687897261824] [client 35.236.3.150:41904] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.json"] [unique_id "appvmp_YbFru5GFbGUr5hgAAAZQ"]
[Fri Sep 04 02:13:31.555248 2026] [:error] [pid 4903:tid 139688014759680] [client 35.236.3.150:37232] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.yaml"] [unique_id "appvm5BBnIzc-NP9i1zZ2AAAAMY"]
[Fri Sep 04 02:13:32.325762 2026] [:error] [pid 8730:tid 139687997974272] [client 35.236.3.150:37234] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.yml"] [unique_id "appvnEI_1Hza4MNR51Sa6wAAAIg"]
[Fri Sep 04 02:13:33.206159 2026] [:error] [pid 7899:tid 139687981188864] [client 35.236.3.150:37248] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/.env"] [unique_id "appvne_1xzZCQNiU9VSfOwAAAEo"]
[Fri Sep 04 02:13:34.042915 2026] [:error] [pid 7808:tid 139687863691008] [client 35.236.3.150:37264] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/apps/.env"] [unique_id "appvnnrMkrRk6piprJrXlwAAABg"]
[Fri Sep 04 02:13:34.840582 2026] [:error] [pid 4903:tid 139688132331264] [client 35.236.3.150:37274] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/.env"] [unique_id "appvnpBBnIzc-NP9i1zZ3wAAAMA"]
[Fri Sep 04 02:13:35.576868 2026] [:error] [pid 7808:tid 139688123938560] [client 35.236.3.150:37278] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/web/.env"] [unique_id "appvn3rMkrRk6piprJrXmAAAAAE"]
[Fri Sep 04 02:13:36.305705 2026] [:error] [pid 8730:tid 139687880476416] [client 35.236.3.150:37294] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/site/.env"] [unique_id "appvoEI_1Hza4MNR51Sa7wAAAJY"]
[Fri Sep 04 02:13:37.214618 2026] [:error] [pid 4933:tid 139688123938560] [client 35.236.3.150:37298] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/public/.env"] [unique_id "appvoZ_YbFru5GFbGUr5jwAAAYE"]
[Fri Sep 04 02:13:38.030185 2026] [:error] [pid 7809:tid 139687981188864] [client 35.236.3.150:37304] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin/.env"] [unique_id "appvohv-7EUWfIIbwpTONAAAAQo"]
[Fri Sep 04 02:13:38.874467 2026] [:error] [pid 7808:tid 139688115545856] [client 35.236.3.150:37320] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend/.env"] [unique_id "appvonrMkrRk6piprJrXnQAAAAI"]
[Fri Sep 04 02:13:39.583980 2026] [:error] [pid 4933:tid 139687997974272] [client 35.236.3.150:37326] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/server/.env"] [unique_id "appvo5_YbFru5GFbGUr5lQAAAYg"]
[Fri Sep 04 02:13:40.935066 2026] [:error] [pid 7808:tid 139688039937792] [client 35.236.3.150:37328] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/frontend/.env"] [unique_id "appvpHrMkrRk6piprJrXngAAAAM"]
[Fri Sep 04 02:13:41.628121 2026] [:error] [pid 7899:tid 139687997974272] [client 35.236.3.150:58860] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/src/.env"] [unique_id "appvpe_1xzZCQNiU9VSfPQAAAEg"]
[Fri Sep 04 02:13:42.385924 2026] [:error] [pid 7899:tid 139687956010752] [client 35.236.3.150:58864] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/core/.env"] [unique_id "appvpu_1xzZCQNiU9VSfPgAAAE0"]
[Fri Sep 04 02:13:43.286289 2026] [:error] [pid 4903:tid 139687981188864] [client 35.236.3.150:58870] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/core/app/.env"] [unique_id "appvp5BBnIzc-NP9i1zZ4AAAAMo"]
[Fri Sep 04 02:13:44.177895 2026] [:error] [pid 4933:tid 139687863691008] [client 35.236.3.150:58886] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/config/.env"] [unique_id "appvqJ_YbFru5GFbGUr5mgAAAZg"]
[Fri Sep 04 02:13:44.909963 2026] [:error] [pid 8730:tid 139688132331264] [client 35.236.3.150:58902] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/private/.env"] [unique_id "appvqEI_1Hza4MNR51Sa-AAAAIA"]
[Fri Sep 04 02:13:45.734121 2026] [:error] [pid 8730:tid 139687914047232] [client 35.236.3.150:58910] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/application/.env"] [unique_id "appvqUI_1Hza4MNR51Sa-gAAAJI"]
[Fri Sep 04 02:13:46.574063 2026] [:error] [pid 4933:tid 139687956010752] [client 35.236.3.150:58916] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/bootstrap/.env"] [unique_id "appvqp_YbFru5GFbGUr5nAAAAY0"]
[Fri Sep 04 02:13:47.355320 2026] [:error] [pid 4933:tid 139688014759680] [client 35.236.3.150:58928] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/database/.env"] [unique_id "appvq5_YbFru5GFbGUr5nQAAAYY"]
[Fri Sep 04 02:13:48.227055 2026] [:error] [pid 4933:tid 139687888869120] [client 35.236.3.150:58934] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/storage/.env"] [unique_id "appvrJ_YbFru5GFbGUr5oQAAAZU"]
[Fri Sep 04 02:13:49.103771 2026] [:error] [pid 4967:tid 139688115545856] [client 35.236.3.150:58938] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/var/www/.env"] [unique_id "appvrV-qnRXNtxh9kJhEmgAAAcI"]
[Fri Sep 04 02:13:49.848416 2026] [:error] [pid 7899:tid 139687888869120] [client 35.236.3.150:58948] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/var/www/html/.env"] [unique_id "appvre_1xzZCQNiU9VSfQQAAAFU"]
[Fri Sep 04 02:13:50.730946 2026] [:error] [pid 4967:tid 139687972796160] [client 35.236.3.150:58960] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/current/.env"] [unique_id "appvrl-qnRXNtxh9kJhEnQAAAcs"]
[Fri Sep 04 02:13:51.520144 2026] [:error] [pid 7808:tid 139687997974272] [client 35.236.3.150:43018] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/release/.env"] [unique_id "appvr3rMkrRk6piprJrXqQAAAAg"]
[Fri Sep 04 02:13:52.462029 2026] [:error] [pid 4967:tid 139688123938560] [client 35.236.3.150:43026] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/releases/.env"] [unique_id "appvsF-qnRXNtxh9kJhEngAAAcE"]
[Fri Sep 04 02:13:53.217578 2026] [:error] [pid 7808:tid 139687947618048] [client 35.236.3.150:43032] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/shared/.env"] [unique_id "appvsXrMkrRk6piprJrXrAAAAA4"]
[Fri Sep 04 02:13:54.136373 2026] [:error] [pid 7808:tid 139687914047232] [client 35.236.3.150:43044] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/deploy/.env"] [unique_id "appvsnrMkrRk6piprJrXrgAAABI"]
[Fri Sep 04 02:13:54.911934 2026] [:error] [pid 4967:tid 139687888869120] [client 35.236.3.150:43048] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/build/.env"] [unique_id "appvsl-qnRXNtxh9kJhEnwAAAdU"]
[Fri Sep 04 02:13:55.686507 2026] [:error] [pid 4933:tid 139687905654528] [client 35.236.3.150:43050] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dist/.env"] [unique_id "appvs5_YbFru5GFbGUr5pgAAAZM"]
[Fri Sep 04 02:13:56.540880 2026] [:error] [pid 8730:tid 139688115545856] [client 35.236.3.150:43058] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/public_html/.env"] [unique_id "appvtEI_1Hza4MNR51SbAgAAAII"]
[Fri Sep 04 02:13:57.246539 2026] [:error] [pid 7899:tid 139687930832640] [client 35.236.3.150:43070] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/htdocs/.env"] [unique_id "appvte_1xzZCQNiU9VSfQgAAAFA"]
[Fri Sep 04 02:13:58.081208 2026] [:error] [pid 4933:tid 139687964403456] [client 35.236.3.150:43072] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/www/.env"] [unique_id "appvtp_YbFru5GFbGUr5qgAAAYw"]
[Fri Sep 04 02:13:58.876922 2026] [:error] [pid 7810:tid 139687947618048] [client 35.236.3.150:43074] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/html/.env"] [unique_id "appvtq3uUwtypbuudFmPLAAAAU4"]
[Fri Sep 04 02:13:59.747232 2026] [:error] [pid 4933:tid 139687939225344] [client 35.236.3.150:43090] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/live/.env"] [unique_id "appvt5_YbFru5GFbGUr5rQAAAY8"]
[Fri Sep 04 02:14:00.477337 2026] [:error] [pid 4933:tid 139688014759680] [client 35.236.3.150:43096] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/prod/.env"] [unique_id "appvuJ_YbFru5GFbGUr5rwAAAYY"]
[Fri Sep 04 02:14:01.305545 2026] [:error] [pid 4933:tid 139688023152384] [client 35.236.3.150:43098] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dev/.env"] [unique_id "appvuZ_YbFru5GFbGUr5sAAAAYU"]
[Fri Sep 04 02:14:03.317428 2026] [:error] [pid 4933:tid 139687997974272] [client 35.236.3.150:43896] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/staging/.env"] [unique_id "appvu5_YbFru5GFbGUr5tAAAAYg"]
[Fri Sep 04 02:14:04.065352 2026] [:error] [pid 8730:tid 139687863691008] [client 35.236.3.150:43906] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/opt/.env"] [unique_id "appvvEI_1Hza4MNR51SbCgAAAJg"]
[Fri Sep 04 02:14:04.849876 2026] [:error] [pid 4933:tid 139687939225344] [client 35.236.3.150:43920] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/laravel/.env"] [unique_id "appvvJ_YbFru5GFbGUr5uAAAAY8"]
[Fri Sep 04 02:14:05.643134 2026] [:error] [pid 4933:tid 139687947618048] [client 35.236.3.150:43922] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/symfony/.env"] [unique_id "appvvZ_YbFru5GFbGUr5ugAAAY4"]
[Fri Sep 04 02:14:06.421825 2026] [:error] [pid 8730:tid 139687922439936] [client 35.236.3.150:43938] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wordpress/.env"] [unique_id "appvvkI_1Hza4MNR51SbCwAAAJE"]
[Fri Sep 04 02:14:08.034290 2026] [:error] [pid 4967:tid 139687914047232] [client 35.236.3.150:43948] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp/.env"] [unique_id "appvwF-qnRXNtxh9kJhEpQAAAdI"]
[Fri Sep 04 02:14:08.763698 2026] [:error] [pid 4933:tid 139687956010752] [client 35.236.3.150:43954] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cms/.env"] [unique_id "appvwJ_YbFru5GFbGUr5wQAAAY0"]
[Fri Sep 04 02:14:09.630788 2026] [:error] [pid 4967:tid 139687972796160] [client 35.236.3.150:43958] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/drupal/.env"] [unique_id "appvwV-qnRXNtxh9kJhEpgAAAcs"]
[Fri Sep 04 02:14:10.418849 2026] [:error] [pid 7808:tid 139687930832640] [client 35.236.3.150:43964] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/joomla/.env"] [unique_id "appvwnrMkrRk6piprJrXsAAAABA"]
[Fri Sep 04 02:14:11.203590 2026] [:error] [pid 4967:tid 139687930832640] [client 35.236.3.150:43974] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/magento/.env"] [unique_id "appvw1-qnRXNtxh9kJhEpwAAAdA"]
[Fri Sep 04 02:14:12.034974 2026] [:error] [pid 7809:tid 139687981188864] [client 35.236.3.150:55582] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/shopify/.env"] [unique_id "appvxBv-7EUWfIIbwpTOPAAAAQo"]
[Fri Sep 04 02:14:12.985158 2026] [:error] [pid 7899:tid 139687972796160] [client 35.236.3.150:55594] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/prestashop/.env"] [unique_id "appvxO_1xzZCQNiU9VSfQwAAAEs"]
[Fri Sep 04 02:14:13.743409 2026] [:error] [pid 4903:tid 139687989581568] [client 35.236.3.150:55608] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/codeigniter/.env"] [unique_id "appvxZBBnIzc-NP9i1zZ5AAAAMk"]
[Fri Sep 04 02:14:14.473129 2026] [:error] [pid 4933:tid 139688115545856] [client 35.236.3.150:55610] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cakephp/.env"] [unique_id "appvxp_YbFru5GFbGUr5ywAAAYI"]
[Fri Sep 04 02:14:15.290421 2026] [:error] [pid 4933:tid 139687897261824] [client 35.236.3.150:55624] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/zend/.env"] [unique_id "appvx5_YbFru5GFbGUr5zAAAAZQ"]
[Fri Sep 04 02:14:16.017866 2026] [:error] [pid 7809:tid 139687964403456] [client 35.236.3.150:55630] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/yii/.env"] [unique_id "appvyBv-7EUWfIIbwpTOPwAAAQw"]
[Fri Sep 04 02:14:16.781750 2026] [:error] [pid 4903:tid 139687863691008] [client 35.236.3.150:55644] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/laravel5/.env"] [unique_id "appvyJBBnIzc-NP9i1zZ5QAAANg"]
[Fri Sep 04 02:14:17.641678 2026] [:error] [pid 7808:tid 139687947618048] [client 35.236.3.150:55660] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v1/.env"] [unique_id "appvyXrMkrRk6piprJrXtwAAAA4"]
[Fri Sep 04 02:14:18.337782 2026] [:error] [pid 4903:tid 139687956010752] [client 35.236.3.150:55670] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v2/.env"] [unique_id "appvypBBnIzc-NP9i1zZ5gAAAM0"]
[Fri Sep 04 02:14:19.235614 2026] [:error] [pid 4903:tid 139687964403456] [client 35.236.3.150:55674] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v3/.env"] [unique_id "appvy5BBnIzc-NP9i1zZ5wAAAMw"]
[Fri Sep 04 02:14:20.013831 2026] [:error] [pid 4903:tid 139688006366976] [client 35.236.3.150:55678] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/v1/.env"] [unique_id "appvzJBBnIzc-NP9i1zZ6QAAAMc"]
[Fri Sep 04 02:14:21.478446 2026] [:error] [pid 7810:tid 139688123938560] [client 35.236.3.150:55684] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/v2/.env"] [unique_id "appvza3uUwtypbuudFmPMgAAAUE"]
[Fri Sep 04 02:14:22.241287 2026] [:error] [pid 4903:tid 139687997974272] [client 35.236.3.150:49648] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/rest/.env"] [unique_id "appvzpBBnIzc-NP9i1zZ6gAAAMg"]
[Fri Sep 04 02:14:22.952362 2026] [:error] [pid 7808:tid 139688006366976] [client 35.236.3.150:49650] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/graphql/.env"] [unique_id "appvznrMkrRk6piprJrXugAAAAc"]
[Fri Sep 04 02:14:23.693062 2026] [:error] [pid 7808:tid 139687930832640] [client 35.236.3.150:49666] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/gateway/.env"] [unique_id "appvz3rMkrRk6piprJrXuwAAABA"]
[Fri Sep 04 02:14:24.506536 2026] [:error] [pid 8730:tid 139687997974272] [client 35.236.3.150:49674] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/microservice/.env"] [unique_id "appv0EI_1Hza4MNR51SbFQAAAIg"]
[Fri Sep 04 02:14:25.284343 2026] [:error] [pid 7810:tid 139688031545088] [client 35.236.3.150:49680] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/service/.env"] [unique_id "appv0a3uUwtypbuudFmPMwAAAUQ"]
[Fri Sep 04 02:14:26.009275 2026] [:error] [pid 4933:tid 139687956010752] [client 35.236.3.150:49686] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/v3/.env"] [unique_id "appv0p_YbFru5GFbGUr53QAAAY0"]
[Fri Sep 04 02:14:26.795855 2026] [:error] [pid 8730:tid 139687863691008] [client 35.236.3.150:49700] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/dev/.env"] [unique_id "appv0kI_1Hza4MNR51SbGQAAAJg"]
[Fri Sep 04 02:14:27.573572 2026] [:error] [pid 4933:tid 139687939225344] [client 35.236.3.150:49706] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/staging/.env"] [unique_id "appv05_YbFru5GFbGUr53gAAAY8"]
[Fri Sep 04 02:14:28.304134 2026] [:error] [pid 4933:tid 139687964403456] [client 35.236.3.150:49710] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/vendor/.env"] [unique_id "appv1J_YbFru5GFbGUr54AAAAYw"]
[Fri Sep 04 02:14:29.044479 2026] [:error] [pid 7808:tid 139688115545856] [client 35.236.3.150:49724] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/lib/.env"] [unique_id "appv1XrMkrRk6piprJrXvgAAAAI"]
[Fri Sep 04 02:14:29.869413 2026] [:error] [pid 7899:tid 139688031545088] [client 35.236.3.150:49728] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/resources/.env"] [unique_id "appv1e_1xzZCQNiU9VSfSQAAAEQ"]
[Fri Sep 04 02:14:30.662871 2026] [:error] [pid 7808:tid 139687897261824] [client 35.236.3.150:49738] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/assets/.env"] [unique_id "appv1nrMkrRk6piprJrXwgAAABQ"]
[Fri Sep 04 02:14:31.464484 2026] [:error] [pid 4967:tid 139688031545088] [client 35.236.3.150:49742] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/uploads/.env"] [unique_id "appv11-qnRXNtxh9kJhEsAAAAcQ"]
[Fri Sep 04 02:14:32.341664 2026] [:error] [pid 7809:tid 139687997974272] [client 35.236.3.150:50234] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/internal/.env"] [unique_id "appv2Bv-7EUWfIIbwpTORAAAAQg"]
[Fri Sep 04 02:14:33.065855 2026] [:error] [pid 4903:tid 139687863691008] [client 35.236.3.150:50240] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/tools/.env"] [unique_id "appv2ZBBnIzc-NP9i1zZ8QAAANg"]
[Fri Sep 04 02:14:33.967032 2026] [:error] [pid 7810:tid 139687981188864] [client 35.236.3.150:50250] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/scripts/.env"] [unique_id "appv2a3uUwtypbuudFmPNQAAAUo"]
[Fri Sep 04 02:14:34.769308 2026] [:error] [pid 8730:tid 139687947618048] [client 35.236.3.150:50256] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/bin/.env"] [unique_id "appv2kI_1Hza4MNR51SbHQAAAI4"]
[Fri Sep 04 02:14:35.605064 2026] [:error] [pid 4933:tid 139687930832640] [client 35.236.3.150:50262] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sbin/.env"] [unique_id "appv25_YbFru5GFbGUr58QAAAZA"]
[Fri Sep 04 02:14:36.440182 2026] [:error] [pid 4967:tid 139687930832640] [client 35.236.3.150:50278] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/local/.env"] [unique_id "appv3F-qnRXNtxh9kJhEtAAAAdA"]
[Fri Sep 04 02:14:37.218660 2026] [:error] [pid 4933:tid 139687922439936] [client 35.236.3.150:50290] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/portal/.env"] [unique_id "appv3Z_YbFru5GFbGUr58gAAAZE"]
[Fri Sep 04 02:14:38.033928 2026] [:error] [pid 8730:tid 139687922439936] [client 35.236.3.150:50294] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dashboard/.env"] [unique_id "appv3kI_1Hza4MNR51SbJQAAAJE"]
[Fri Sep 04 02:14:38.751212 2026] [:error] [pid 8730:tid 139688006366976] [client 35.236.3.150:50308] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/panel/.env"] [unique_id "appv3kI_1Hza4MNR51SbJgAAAIc"]
[Fri Sep 04 02:14:39.526686 2026] [:error] [pid 4933:tid 139688014759680] [client 35.236.3.150:50318] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/crm/.env"] [unique_id "appv35_YbFru5GFbGUr59gAAAYY"]
[Fri Sep 04 02:14:40.348027 2026] [:error] [pid 7899:tid 139688039937792] [client 35.236.3.150:50324] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/erp/.env"] [unique_id "appv4O_1xzZCQNiU9VSfUAAAAEM"]
[Fri Sep 04 02:14:41.166308 2026] [:error] [pid 7810:tid 139687930832640] [client 35.236.3.150:50332] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/shop/.env"] [unique_id "appv4a3uUwtypbuudFmPNgAAAVA"]
[Fri Sep 04 02:14:41.849302 2026] [:error] [pid 7899:tid 139687964403456] [client 35.236.3.150:58756] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/store/.env"] [unique_id "appv4e_1xzZCQNiU9VSfUQAAAEw"]
[Fri Sep 04 02:14:42.674156 2026] [:error] [pid 4903:tid 139687888869120] [client 35.236.3.150:58772] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/saas/.env"] [unique_id "appv4pBBnIzc-NP9i1zZ9QAAANU"]
[Fri Sep 04 02:14:44.393910 2026] [:error] [pid 7809:tid 139687897261824] [client 35.236.3.150:58774] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/client/.env"] [unique_id "appv5Bv-7EUWfIIbwpTOSgAAARQ"]
[Fri Sep 04 02:14:45.244822 2026] [:error] [pid 4933:tid 139688039937792] [client 35.236.3.150:58788] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/project/.env"] [unique_id "appv5Z_YbFru5GFbGUr5-wAAAYM"]
[Fri Sep 04 02:14:46.022924 2026] [:error] [pid 4933:tid 139687905654528] [client 35.236.3.150:58792] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin-panel/.env"] [unique_id "appv5p_YbFru5GFbGUr5_gAAAZM"]
[Fri Sep 04 02:14:46.777994 2026] [:error] [pid 4933:tid 139687888869120] [client 35.236.3.150:58796] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/control-panel/.env"] [unique_id "appv5p_YbFru5GFbGUr5_wAAAZU"]
[Fri Sep 04 02:14:47.601296 2026] [:error] [pid 4967:tid 139688031545088] [client 35.236.3.150:58810] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/user-panel/.env"] [unique_id "appv51-qnRXNtxh9kJhEvgAAAcQ"]
[Fri Sep 04 02:14:48.313443 2026] [:error] [pid 4967:tid 139688023152384] [client 35.236.3.150:58826] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/node/.env"] [unique_id "appv6F-qnRXNtxh9kJhEwgAAAcU"]
[Fri Sep 04 02:14:49.096426 2026] [:error] [pid 8730:tid 139687972796160] [client 35.236.3.150:58832] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/express/.env"] [unique_id "appv6UI_1Hza4MNR51SbKQAAAIs"]
[Fri Sep 04 02:14:49.878910 2026] [:error] [pid 7808:tid 139687905654528] [client 35.236.3.150:58848] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/next/.env"] [unique_id "appv6XrMkrRk6piprJrXxgAAABM"]
[Fri Sep 04 02:14:50.706001 2026] [:error] [pid 4933:tid 139688123938560] [client 35.236.3.150:58850] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/nuxt/.env"] [unique_id "appv6p_YbFru5GFbGUr6AQAAAYE"]
[Fri Sep 04 02:14:51.497206 2026] [:error] [pid 4967:tid 139687964403456] [client 35.236.3.150:40038] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/nest/.env"] [unique_id "appv61-qnRXNtxh9kJhExQAAAcw"]
[Fri Sep 04 02:14:52.190054 2026] [:error] [pid 4933:tid 139687989581568] [client 35.236.3.150:40050] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/react/.env"] [unique_id "appv7J_YbFru5GFbGUr6AwAAAYk"]
[Fri Sep 04 02:14:52.962744 2026] [:error] [pid 4967:tid 139687863691008] [client 35.236.3.150:40064] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/vue/.env"] [unique_id "appv7F-qnRXNtxh9kJhExgAAAdg"]
[Fri Sep 04 02:14:53.734441 2026] [:error] [pid 7899:tid 139688132331264] [client 35.236.3.150:40076] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/angular/.env"] [unique_id "appv7e_1xzZCQNiU9VSfVwAAAEA"]
[Fri Sep 04 02:14:54.527028 2026] [:error] [pid 4967:tid 139687981188864] [client 35.236.3.150:40090] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/svelte/.env"] [unique_id "appv7l-qnRXNtxh9kJhExwAAAco"]
[Fri Sep 04 02:14:55.247360 2026] [:error] [pid 7899:tid 139687972796160] [client 35.236.3.150:40102] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/vite/.env"] [unique_id "appv7-_1xzZCQNiU9VSfWQAAAEs"]
[Fri Sep 04 02:14:57.006821 2026] [:error] [pid 4967:tid 139688039937792] [client 35.236.3.150:40110] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backup/.env"] [unique_id "appv8V-qnRXNtxh9kJhEygAAAcM"]
[Fri Sep 04 02:14:57.768074 2026] [:error] [pid 7899:tid 139687897261824] [client 35.236.3.150:40126] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backups/.env"] [unique_id "appv8e_1xzZCQNiU9VSfXgAAAFQ"]
[Fri Sep 04 02:14:58.729086 2026] [:error] [pid 7809:tid 139688023152384] [client 35.236.3.150:40130] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/old/.env"] [unique_id "appv8hv-7EUWfIIbwpTOTwAAAQU"]
[Fri Sep 04 02:14:59.595168 2026] [:error] [pid 8730:tid 139687880476416] [client 35.236.3.150:40138] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/tmp/.env"] [unique_id "appv80I_1Hza4MNR51SbMAAAAJY"]
[Fri Sep 04 02:15:00.425751 2026] [:error] [pid 4933:tid 139687989581568] [client 35.236.3.150:40140] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/temp/.env"] [unique_id "appv9J_YbFru5GFbGUr6DgAAAYk"]
[Fri Sep 04 02:15:01.290481 2026] [:error] [pid 7808:tid 139687880476416] [client 35.236.3.150:40150] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/lab/.env"] [unique_id "appv9XrMkrRk6piprJrXyQAAABY"]
[Fri Sep 04 02:15:02.195077 2026] [:error] [pid 7899:tid 139688123938560] [client 35.236.3.150:49956] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cronlab/.env"] [unique_id "appv9u_1xzZCQNiU9VSfYAAAAEE"]
[Fri Sep 04 02:15:03.185916 2026] [:error] [pid 4933:tid 139688132331264] [client 35.236.3.150:49970] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cron/.env"] [unique_id "appv95_YbFru5GFbGUr6EAAAAYA"]
[Fri Sep 04 02:15:04.066764 2026] [:error] [pid 7810:tid 139688023152384] [client 35.236.3.150:49976] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/en/.env"] [unique_id "appv-K3uUwtypbuudFmPPAAAAUU"]
[Fri Sep 04 02:15:04.900334 2026] [:error] [pid 4933:tid 139687939225344] [client 35.236.3.150:49990] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/administrator/.env"] [unique_id "appv-J_YbFru5GFbGUr6EwAAAY8"]
[Fri Sep 04 02:15:05.732326 2026] [:error] [pid 4933:tid 139688014759680] [client 35.236.3.150:49996] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/psnlink/.env"] [unique_id "appv-Z_YbFru5GFbGUr6FAAAAYY"]
[Fri Sep 04 02:15:06.505374 2026] [:error] [pid 4933:tid 139687880476416] [client 35.236.3.150:49998] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/exapi/.env"] [unique_id "appv-p_YbFru5GFbGUr6FwAAAZY"]
[Fri Sep 04 02:15:07.304893 2026] [:error] [pid 7899:tid 139687888869120] [client 35.236.3.150:50012] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sitemaps/.env"] [unique_id "appv--_1xzZCQNiU9VSfYQAAAFU"]
[Fri Sep 04 02:15:08.106143 2026] [:error] [pid 7809:tid 139687947618048] [client 35.236.3.150:50014] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup1"] [unique_id "appv_Bv-7EUWfIIbwpTOVAAAAQ4"]
[Fri Sep 04 02:15:08.938551 2026] [:error] [pid 7899:tid 139687930832640] [client 35.236.3.150:50030] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup2"] [unique_id "appv_O_1xzZCQNiU9VSfYwAAAFA"]
[Fri Sep 04 02:15:09.623432 2026] [:error] [pid 4967:tid 139687888869120] [client 35.236.3.150:50044] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/logs/.env"] [unique_id "appv_V-qnRXNtxh9kJhE0AAAAdU"]
[Fri Sep 04 02:15:10.392623 2026] [:error] [pid 7808:tid 139687897261824] [client 35.236.3.150:50048] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cache/.env"] [unique_id "appv_nrMkrRk6piprJrXzAAAABQ"]
[Fri Sep 04 02:15:11.792277 2026] [:error] [pid 7809:tid 139687922439936] [client 35.236.3.150:53116] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailer/.env"] [unique_id "appv_xv-7EUWfIIbwpTOVgAAARE"]
[Fri Sep 04 02:15:12.693942 2026] [:error] [pid 4933:tid 139687922439936] [client 35.236.3.150:53120] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mail/.env"] [unique_id "appwAJ_YbFru5GFbGUr6IwAAAZE"]
[Fri Sep 04 02:15:13.471979 2026] [:error] [pid 4903:tid 139687989581568] [client 35.236.3.150:53132] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/email/.env"] [unique_id "appwAZBBnIzc-NP9i1zZ-wAAAMk"]
[Fri Sep 04 02:15:14.214772 2026] [:error] [pid 4903:tid 139687956010752] [client 35.236.3.150:53140] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/smtp/.env"] [unique_id "appwApBBnIzc-NP9i1zZ_AAAAM0"]
[Fri Sep 04 02:15:15.098025 2026] [:error] [pid 8730:tid 139688123938560] [client 35.236.3.150:53152] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailing/.env"] [unique_id "appwA0I_1Hza4MNR51SbPwAAAIE"]
[Fri Sep 04 02:15:15.953745 2026] [:error] [pid 4967:tid 139687930832640] [client 35.236.3.150:53154] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/notifications/.env"] [unique_id "appwA1-qnRXNtxh9kJhE1gAAAdA"]
[Fri Sep 04 02:15:16.821835 2026] [:error] [pid 4933:tid 139687872083712] [client 35.236.3.150:53164] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/notify/.env"] [unique_id "appwBJ_YbFru5GFbGUr6KgAAAZc"]
[Fri Sep 04 02:15:17.752028 2026] [:error] [pid 4903:tid 139687880476416] [client 35.236.3.150:53168] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sender/.env"] [unique_id "appwBZBBnIzc-NP9i1zZ_gAAANY"]
[Fri Sep 04 02:15:18.590470 2026] [:error] [pid 8730:tid 139687930832640] [client 35.236.3.150:53184] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/campaign/.env"] [unique_id "appwBkI_1Hza4MNR51SbQgAAAJA"]
[Fri Sep 04 02:15:19.452237 2026] [:error] [pid 7808:tid 139687914047232] [client 35.236.3.150:53194] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/newsletter/.env"] [unique_id "appwB3rMkrRk6piprJrXzgAAABI"]
[Fri Sep 04 02:15:20.314991 2026] [:error] [pid 8730:tid 139687947618048] [client 35.236.3.150:53200] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/ses/.env"] [unique_id "appwCEI_1Hza4MNR51SbQwAAAI4"]
[Fri Sep 04 02:15:21.098115 2026] [:error] [pid 8730:tid 139687905654528] [client 35.236.3.150:53202] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sendgrid/.env"] [unique_id "appwCUI_1Hza4MNR51SbRAAAAJM"]
[Fri Sep 04 02:15:21.883961 2026] [:error] [pid 4933:tid 139687956010752] [client 35.236.3.150:45222] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sparkpost/.env"] [unique_id "appwCZ_YbFru5GFbGUr6MgAAAY0"]
[Fri Sep 04 02:15:22.843575 2026] [:error] [pid 7809:tid 139688023152384] [client 35.236.3.150:45226] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/postmark/.env"] [unique_id "appwChv-7EUWfIIbwpTOWwAAAQU"]
[Fri Sep 04 02:15:24.385750 2026] [:error] [pid 7810:tid 139687964403456] [client 35.236.3.150:45236] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailgun/.env"] [unique_id "appwDK3uUwtypbuudFmPQgAAAUw"]
[Fri Sep 04 02:15:25.328173 2026] [:error] [pid 4933:tid 139687863691008] [client 35.236.3.150:45238] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mandrill/.env"] [unique_id "appwDZ_YbFru5GFbGUr6NgAAAZg"]
[Fri Sep 04 02:15:26.173683 2026] [:error] [pid 8730:tid 139688039937792] [client 35.236.3.150:45244] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailjet/.env"] [unique_id "appwDkI_1Hza4MNR51SbRgAAAIM"]
[Fri Sep 04 02:15:27.074625 2026] [:error] [pid 7809:tid 139687981188864] [client 35.236.3.150:45256] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/brevo/.env"] [unique_id "appwDxv-7EUWfIIbwpTOXAAAAQo"]
[Fri Sep 04 02:15:27.867909 2026] [:error] [pid 7809:tid 139688014759680] [client 35.236.3.150:45264] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/transactional/.env"] [unique_id "appwDxv-7EUWfIIbwpTOXQAAAQY"]
[Fri Sep 04 02:15:28.639848 2026] [:error] [pid 4903:tid 139688115545856] [client 35.236.3.150:45276] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/bulk/.env"] [unique_id "appwEJBBnIzc-NP9i1zaAwAAAMI"]
[Fri Sep 04 02:15:29.539081 2026] [:error] [pid 4903:tid 139687905654528] [client 35.236.3.150:45280] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/aws/.env"] [unique_id "appwEZBBnIzc-NP9i1zaBAAAANM"]
[Fri Sep 04 02:15:30.311155 2026] [:error] [pid 4933:tid 139688031545088] [client 35.236.3.150:45290] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/azure/.env"] [unique_id "appwEp_YbFru5GFbGUr6OwAAAYQ"]
[Fri Sep 04 02:15:31.032446 2026] [:error] [pid 4903:tid 139687914047232] [client 35.236.3.150:45302] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/gcp/.env"] [unique_id "appwE5BBnIzc-NP9i1zaBQAAANI"]
[Fri Sep 04 02:15:31.812227 2026] [:error] [pid 7810:tid 139687922439936] [client 35.236.3.150:40348] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cloud/.env"] [unique_id "appwE63uUwtypbuudFmPQwAAAVE"]
[Fri Sep 04 02:15:32.573422 2026] [:error] [pid 4933:tid 139688023152384] [client 35.236.3.150:40350] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/infrastructure/.env"] [unique_id "appwFJ_YbFru5GFbGUr6PwAAAYU"]
[Fri Sep 04 02:15:33.541120 2026] [:error] [pid 7899:tid 139687914047232] [client 35.236.3.150:40358] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/docker/.env"] [unique_id "appwFe_1xzZCQNiU9VSfZgAAAFI"]
[Fri Sep 04 02:15:34.457327 2026] [:error] [pid 7809:tid 139687972796160] [client 35.236.3.150:40368] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/k8s/.env"] [unique_id "appwFhv-7EUWfIIbwpTOYAAAAQs"]
[Fri Sep 04 02:15:35.309715 2026] [:error] [pid 4967:tid 139688023152384] [client 35.236.3.150:40384] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/kubernetes/.env"] [unique_id "appwF1-qnRXNtxh9kJhE4QAAAcU"]
[Fri Sep 04 02:15:36.102923 2026] [:error] [pid 4933:tid 139687947618048] [client 35.236.3.150:40386] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/terraform/.env"] [unique_id "appwGJ_YbFru5GFbGUr6QwAAAY4"]
[Fri Sep 04 02:15:36.902700 2026] [:error] [pid 8730:tid 139688031545088] [client 35.236.3.150:40394] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/ansible/.env"] [unique_id "appwGEI_1Hza4MNR51SbTgAAAIQ"]
[Fri Sep 04 02:15:37.648468 2026] [:error] [pid 7808:tid 139687863691008] [client 35.236.3.150:40402] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/.env"] [unique_id "appwGXrMkrRk6piprJrX0wAAABg"]
[Fri Sep 04 02:15:38.517083 2026] [:error] [pid 4933:tid 139687939225344] [client 35.236.3.150:40410] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/ci/.env"] [unique_id "appwGp_YbFru5GFbGUr6RgAAAY8"]
[Fri Sep 04 02:15:39.423041 2026] [:error] [pid 4967:tid 139687981188864] [client 35.236.3.150:40422] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cd/.env"] [unique_id "appwG1-qnRXNtxh9kJhE5QAAAco"]
[Fri Sep 04 02:15:40.939457 2026] [:error] [pid 4967:tid 139687914047232] [client 35.236.3.150:40432] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/jenkins/.env"] [unique_id "appwHF-qnRXNtxh9kJhE5wAAAdI"]
[Fri Sep 04 02:15:41.894552 2026] [:error] [pid 7808:tid 139687872083712] [client 35.236.3.150:51140] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/gitlab/.env"] [unique_id "appwHXrMkrRk6piprJrX1AAAABc"]
[Fri Sep 04 02:15:42.681348 2026] [:error] [pid 7810:tid 139688132331264] [client 35.236.3.150:51146] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/github/.env"] [unique_id "appwHq3uUwtypbuudFmPRAAAAUA"]
[Fri Sep 04 02:15:43.566388 2026] [:error] [pid 8730:tid 139688039937792] [client 35.236.3.150:51154] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/actions/.env"] [unique_id "appwH0I_1Hza4MNR51SbUQAAAIM"]
[Fri Sep 04 02:15:44.483073 2026] [:error] [pid 4967:tid 139687888869120] [client 35.236.3.150:51156] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/circleci/.env"] [unique_id "appwIF-qnRXNtxh9kJhE7AAAAdU"]
[Fri Sep 04 02:15:45.313866 2026] [:error] [pid 7810:tid 139688123938560] [client 35.236.3.150:51160] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/travis/.env"] [unique_id "appwIa3uUwtypbuudFmPRQAAAUE"]
[Fri Sep 04 02:15:46.142997 2026] [:error] [pid 4933:tid 139687880476416] [client 35.236.3.150:51174] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/buildkite/.env"] [unique_id "appwIp_YbFru5GFbGUr6SgAAAZY"]
[Fri Sep 04 02:15:47.097324 2026] [:error] [pid 4933:tid 139688132331264] [client 35.236.3.150:51178] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mysql/.env"] [unique_id "appwI5_YbFru5GFbGUr6SwAAAYA"]
[Fri Sep 04 02:15:47.898251 2026] [:error] [pid 4933:tid 139687981188864] [client 35.236.3.150:51184] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/postgres/.env"] [unique_id "appwI5_YbFru5GFbGUr6TgAAAYo"]
[Fri Sep 04 02:15:48.714344 2026] [:error] [pid 4903:tid 139687981188864] [client 35.236.3.150:51192] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mongodb/.env"] [unique_id "appwJJBBnIzc-NP9i1zaCAAAAMo"]
[Fri Sep 04 02:15:49.565442 2026] [:error] [pid 8730:tid 139688123938560] [client 35.236.3.150:51196] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/redis/.env"] [unique_id "appwJUI_1Hza4MNR51SbVgAAAIE"]
[Fri Sep 04 02:15:50.407721 2026] [:error] [pid 8730:tid 139687956010752] [client 35.236.3.150:51210] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/elasticsearch/.env"] [unique_id "appwJkI_1Hza4MNR51SbWAAAAI0"]
[Fri Sep 04 02:15:51.367374 2026] [:error] [pid 4933:tid 139687939225344] [client 35.236.3.150:51216] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/rabbitmq/.env"] [unique_id "appwJ5_YbFru5GFbGUr6UQAAAY8"]
[Fri Sep 04 02:15:52.116026 2026] [:error] [pid 4933:tid 139687972796160] [client 35.236.3.150:56988] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/kafka/.env"] [unique_id "appwKJ_YbFru5GFbGUr6UwAAAYs"]
[Fri Sep 04 02:15:53.041698 2026] [:error] [pid 7810:tid 139687939225344] [client 35.236.3.150:57002] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/queue/.env"] [unique_id "appwKa3uUwtypbuudFmPRwAAAU8"]
[Fri Sep 04 02:15:53.847123 2026] [:error] [pid 8730:tid 139688115545856] [client 35.236.3.150:57006] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/worker/.env"] [unique_id "appwKUI_1Hza4MNR51SbXQAAAII"]
[Fri Sep 04 02:15:54.759392 2026] [:error] [pid 4967:tid 139687956010752] [client 35.236.3.150:57020] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/job/.env"] [unique_id "appwKl-qnRXNtxh9kJhE8gAAAc0"]
[Fri Sep 04 02:15:55.558950 2026] [:error] [pid 4967:tid 139688031545088] [client 35.236.3.150:57034] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/test/.env"] [unique_id "appwK1-qnRXNtxh9kJhE9QAAAcQ"]
[Fri Sep 04 02:15:56.317154 2026] [:error] [pid 8730:tid 139687947618048] [client 35.236.3.150:57042] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/qa/.env"] [unique_id "appwLEI_1Hza4MNR51SbYgAAAI4"]
[Fri Sep 04 02:15:57.650001 2026] [:error] [pid 7809:tid 139687880476416] [client 35.236.3.150:57044] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/preview/.env"] [unique_id "appwLRv-7EUWfIIbwpTOYwAAARY"]
[Fri Sep 04 02:15:58.529407 2026] [:error] [pid 4967:tid 139688123938560] [client 35.236.3.150:57056] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/beta/.env"] [unique_id "appwLl-qnRXNtxh9kJhE9wAAAcE"]
[Fri Sep 04 02:15:59.428615 2026] [:error] [pid 4933:tid 139688014759680] [client 35.236.3.150:57060] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/uat/.env"] [unique_id "appwL5_YbFru5GFbGUr6WwAAAYY"]
[Fri Sep 04 02:16:00.172489 2026] [:error] [pid 4903:tid 139687863691008] [client 35.236.3.150:57066] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/stage/.env"] [unique_id "appwMJBBnIzc-NP9i1zaDQAAANg"]
[Fri Sep 04 02:16:00.928432 2026] [:error] [pid 7808:tid 139688132331264] [client 35.236.3.150:57068] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/development/.env"] [unique_id "appwMHrMkrRk6piprJrX2wAAAAA"]
[Fri Sep 04 02:16:01.850719 2026] [:error] [pid 8730:tid 139687863691008] [client 35.236.3.150:37302] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/production/.env"] [unique_id "appwMUI_1Hza4MNR51SbZQAAAJg"]
[Fri Sep 04 02:16:02.782810 2026] [:error] [pid 8730:tid 139688115545856] [client 35.236.3.150:37310] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/config/app/.env"] [unique_id "appwMkI_1Hza4MNR51SbZgAAAII"]
[Fri Sep 04 02:16:03.615873 2026] [proxy_fcgi:error] [pid 4933:tid 139687880476416] [client 35.236.3.150:37318] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:04.639118 2026] [proxy_fcgi:error] [pid 8730:tid 139687880476416] [client 35.236.3.150:37324] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:05.538315 2026] [proxy_fcgi:error] [pid 4903:tid 139687947618048] [client 35.236.3.150:37328] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:06.462065 2026] [proxy_fcgi:error] [pid 7808:tid 139688006366976] [client 35.236.3.150:37342] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:07.375656 2026] [proxy_fcgi:error] [pid 7899:tid 139687964403456] [client 35.236.3.150:37358] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:08.279443 2026] [proxy_fcgi:error] [pid 7809:tid 139687981188864] [client 35.236.3.150:37368] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:09.171536 2026] [proxy_fcgi:error] [pid 4967:tid 139688014759680] [client 35.236.3.150:37372] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:11.009768 2026] [proxy_fcgi:error] [pid 8730:tid 139688014759680] [client 35.236.3.150:37392] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:11.980155 2026] [proxy_fcgi:error] [pid 8730:tid 139688039937792] [client 35.236.3.150:44220] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:12.987873 2026] [proxy_fcgi:error] [pid 8730:tid 139687939225344] [client 35.236.3.150:44224] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:19.892936 2026] [proxy_fcgi:error] [pid 7808:tid 139687897261824] [client 35.236.3.150:44270] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:20.777181 2026] [proxy_fcgi:error] [pid 4967:tid 139687888869120] [client 35.236.3.150:44280] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:21.641250 2026] [proxy_fcgi:error] [pid 8730:tid 139688123938560] [client 35.236.3.150:59674] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:22.429987 2026] [proxy_fcgi:error] [pid 7810:tid 139688023152384] [client 35.236.3.150:59686] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:23.318589 2026] [proxy_fcgi:error] [pid 4903:tid 139688123938560] [client 35.236.3.150:59688] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:24.092170 2026] [proxy_fcgi:error] [pid 7899:tid 139688031545088] [client 35.236.3.150:59700] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:16:26.706950 2026] [:error] [pid 8730:tid 139687880476416] [client 35.236.3.150:59734] [client 35.236.3.150] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.pesema.com"] [uri "/webroot/index.php/_environment"] [unique_id "appwSkI_1Hza4MNR51SbgAAAAJY"]
[Fri Sep 04 02:16:27.448996 2026] [:error] [pid 4933:tid 139687947618048] [client 35.236.3.150:59742] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/mail/phpinfo.php"] [unique_id "appwS5_YbFru5GFbGUr6cwAAAY4"]
[Fri Sep 04 02:16:28.252828 2026] [:error] [pid 7809:tid 139687956010752] [client 35.236.3.150:59748] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cpanel/phpinfo.php"] [unique_id "appwTBv-7EUWfIIbwpTOaQAAAQ0"]
[Fri Sep 04 02:16:29.076467 2026] [:error] [pid 4967:tid 139687981188864] [client 35.236.3.150:59760] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/hosting/phpinfo.php"] [unique_id "appwTV-qnRXNtxh9kJhFBAAAAco"]
[Fri Sep 04 02:16:29.974919 2026] [:error] [pid 7809:tid 139687930832640] [client 35.236.3.150:59766] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/webmail/phpinfo.php"] [unique_id "appwTRv-7EUWfIIbwpTOawAAARA"]
[Fri Sep 04 02:16:31.054969 2026] [:error] [pid 8730:tid 139687930832640] [client 35.236.3.150:59776] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/smtp/phpinfo.php"] [unique_id "appwT0I_1Hza4MNR51SbggAAAJA"]
[Fri Sep 04 02:16:32.805564 2026] [:error] [pid 4967:tid 139687947618048] [client 35.236.3.150:34732] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php.bak"] [unique_id "appwUF-qnRXNtxh9kJhFBQAAAc4"]
[Fri Sep 04 02:16:33.553625 2026] [:error] [pid 4903:tid 139688023152384] [client 35.236.3.150:34738] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php.old"] [unique_id "appwUZBBnIzc-NP9i1zaFAAAAMU"]
[Fri Sep 04 02:16:34.437001 2026] [:error] [pid 4933:tid 139688023152384] [client 35.236.3.150:34740] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php~"] [unique_id "appwUp_YbFru5GFbGUr6eQAAAYU"]
[Fri Sep 04 02:16:35.567180 2026] [:error] [pid 4933:tid 139687872083712] [client 35.236.3.150:34746] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/info.php.bak"] [unique_id "appwU5_YbFru5GFbGUr6ewAAAZc"]
[Fri Sep 04 02:16:36.521676 2026] [:error] [pid 7899:tid 139688023152384] [client 35.236.3.150:34754] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php.save"] [unique_id "appwVO_1xzZCQNiU9VSfeQAAAEU"]
[Fri Sep 04 02:16:37.294701 2026] [:error] [pid 4967:tid 139688039937792] [client 35.236.3.150:34760] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/staging/phpinfo.php"] [unique_id "appwVV-qnRXNtxh9kJhFBgAAAcM"]
[Fri Sep 04 02:16:38.035142 2026] [:error] [pid 7808:tid 139687964403456] [client 35.236.3.150:34772] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/beta/phpinfo.php"] [unique_id "appwVnrMkrRk6piprJrX5AAAAAw"]
[Fri Sep 04 02:16:38.956794 2026] [:error] [pid 4967:tid 139688014759680] [client 35.236.3.150:34776] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/uat/phpinfo.php"] [unique_id "appwVl-qnRXNtxh9kJhFBwAAAcY"]
[Fri Sep 04 02:16:39.886527 2026] [:error] [pid 7899:tid 139687956010752] [client 35.236.3.150:34778] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/qa/phpinfo.php"] [unique_id "appwV-_1xzZCQNiU9VSfegAAAE0"]
[Fri Sep 04 02:16:40.875718 2026] [:error] [pid 8730:tid 139687964403456] [client 35.236.3.150:34788] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/preview/phpinfo.php"] [unique_id "appwWEI_1Hza4MNR51SbjAAAAIw"]
[Fri Sep 04 02:16:41.617414 2026] [:error] [pid 7899:tid 139687914047232] [client 35.236.3.150:56642] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/www/phpinfo.php"] [unique_id "appwWe_1xzZCQNiU9VSfewAAAFI"]
[Fri Sep 04 02:16:42.354177 2026] [:error] [pid 7808:tid 139687880476416] [client 35.236.3.150:56650] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/htdocs/phpinfo.php"] [unique_id "appwWnrMkrRk6piprJrX5gAAABY"]
[Fri Sep 04 02:16:43.143621 2026] [:error] [pid 4933:tid 139688123938560] [client 35.236.3.150:56660] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/public_html/phpinfo.php"] [unique_id "appwW5_YbFru5GFbGUr6hQAAAYE"]
[Fri Sep 04 02:16:44.147842 2026] [:error] [pid 4933:tid 139687947618048] [client 35.236.3.150:56676] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/site/phpinfo.php"] [unique_id "appwXJ_YbFru5GFbGUr6hwAAAY4"]
[Fri Sep 04 02:16:45.077385 2026] [:error] [pid 7810:tid 139687914047232] [client 35.236.3.150:56688] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/docs/phpinfo.php"] [unique_id "appwXa3uUwtypbuudFmPVgAAAVI"]
[Fri Sep 04 02:16:45.928356 2026] [:error] [pid 7810:tid 139687863691008] [client 35.236.3.150:56700] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "appwXa3uUwtypbuudFmPVwAAAVg"]
[Fri Sep 04 02:16:46.758063 2026] [:error] [pid 4933:tid 139687888869120] [client 35.236.3.150:56706] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/administrator/phpinfo.php"] [unique_id "appwXp_YbFru5GFbGUr6iAAAAZU"]
[Fri Sep 04 02:16:48.352189 2026] [:error] [pid 4903:tid 139687956010752] [client 35.236.3.150:56710] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/core/phpinfo.php"] [unique_id "appwYJBBnIzc-NP9i1zaGQAAAM0"]
[Fri Sep 04 02:16:49.248925 2026] [:error] [pid 4967:tid 139687872083712] [client 35.236.3.150:56726] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/includes/phpinfo.php"] [unique_id "appwYV-qnRXNtxh9kJhFDQAAAdc"]
[Fri Sep 04 02:16:50.158023 2026] [:error] [pid 7810:tid 139688014759680] [client 35.236.3.150:56742] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/service-account.json"] [unique_id "appwYq3uUwtypbuudFmPWgAAAUY"]
[Fri Sep 04 02:16:50.913514 2026] [:error] [pid 4903:tid 139687880476416] [client 35.236.3.150:56748] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sa.json"] [unique_id "appwYpBBnIzc-NP9i1zaGwAAANY"]
[Fri Sep 04 02:16:51.684924 2026] [:error] [pid 7899:tid 139688031545088] [client 35.236.3.150:43722] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gcp-key.json"] [unique_id "appwY-_1xzZCQNiU9VSffAAAAEQ"]
[Fri Sep 04 02:16:52.548014 2026] [:error] [pid 7808:tid 139687914047232] [client 35.236.3.150:43738] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gcp-credentials.json"] [unique_id "appwZHrMkrRk6piprJrX7QAAABI"]
[Fri Sep 04 02:16:53.536881 2026] [:error] [pid 4967:tid 139687947618048] [client 35.236.3.150:43742] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gcp-sa.json"] [unique_id "appwZV-qnRXNtxh9kJhFDwAAAc4"]
[Fri Sep 04 02:16:54.508809 2026] [:error] [pid 4967:tid 139687939225344] [client 35.236.3.150:43748] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/credentials.json"] [unique_id "appwZl-qnRXNtxh9kJhFEwAAAc8"]
[Fri Sep 04 02:16:55.304377 2026] [:error] [pid 4967:tid 139688006366976] [client 35.236.3.150:43764] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/google-credentials.json"] [unique_id "appwZ1-qnRXNtxh9kJhFFQAAAcc"]
[Fri Sep 04 02:16:55.983175 2026] [:error] [pid 4933:tid 139687964403456] [client 35.236.3.150:43772] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/google-key.json"] [unique_id "appwZ5_YbFru5GFbGUr6kgAAAYw"]
[Fri Sep 04 02:16:56.834931 2026] [:error] [pid 4903:tid 139687897261824] [client 35.236.3.150:43786] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/.config/gcloud/application_default_credentials.json"] [unique_id "appwaJBBnIzc-NP9i1zaIQAAANQ"]
[Fri Sep 04 02:16:57.753342 2026] [:error] [pid 8730:tid 139688132331264] [client 35.236.3.150:43790] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/application_default_credentials.json"] [unique_id "appwaUI_1Hza4MNR51SbpgAAAIA"]
[Fri Sep 04 02:16:58.672249 2026] [:error] [pid 4903:tid 139687939225344] [client 35.236.3.150:43796] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/key.json"] [unique_id "appwapBBnIzc-NP9i1zaIgAAAM8"]
[Fri Sep 04 02:16:59.565007 2026] [:error] [pid 4933:tid 139687880476416] [client 35.236.3.150:43804] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/keyfile.json"] [unique_id "appwa5_YbFru5GFbGUr6mAAAAZY"]
[Fri Sep 04 02:17:00.426065 2026] [:error] [pid 8730:tid 139687964403456] [client 35.236.3.150:43818] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/firebase-adminsdk.json"] [unique_id "appwbEI_1Hza4MNR51SbqQAAAIw"]
[Fri Sep 04 02:17:01.345906 2026] [:error] [pid 7810:tid 139688031545088] [client 35.236.3.150:43824] [client 35.236.3.150] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/firebase-key.json"] [unique_id "appwba3uUwtypbuudFmPaQAAAUQ"]
[Fri Sep 04 02:20:54.159759 2026] [:error] [pid 7809:tid 139687922439936] [client 172.234.233.91:48602] [client 172.234.233.91] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/administrator/manifests/files/joomla.xml"] [unique_id "appxVhv-7EUWfIIbwpTO0QAAARE"]
[Fri Sep 04 02:20:55.504204 2026] [:error] [pid 7899:tid 139688115545856] [client 172.234.233.91:49330] [client 172.234.233.91] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/language/en-GB/en-GB.xml"] [unique_id "appxV-_1xzZCQNiU9VSf-AAAAEI"]
[Fri Sep 04 02:20:56.835664 2026] [:error] [pid 4903:tid 139688014759680] [client 172.234.233.91:49590] [client 172.234.233.91] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/media/system/js/core.js"] [unique_id "appxWJBBnIzc-NP9i1zakgAAAMY"]
[Fri Sep 04 02:33:06.994257 2026] [proxy_fcgi:error] [pid 4967:tid 139687939225344] [client 138.68.43.17:59764] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:51:43.171499 2026] [:error] [pid 4933:tid 139687939225344] [client 43.134.56.214:44972] [client 43.134.56.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "app4j5_YbFru5GFbGUoG-gAAAY8"]
[Fri Sep 04 03:00:40.012757 2026] [authz_core:error] [pid 7810:tid 139688023152384] [client 138.199.19.180:50362] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Fri Sep 04 03:33:12.651288 2026] [:error] [pid 32150:tid 140510308062976] [client 175.27.163.171:36112] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apqCSHxoMEVqD2_l3OKCCQAAAAc"]
[Fri Sep 04 03:39:57.669950 2026] [:error] [pid 31959:tid 140510173779712] [client 104.28.222.46:31997] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup"] [unique_id "apqD3SYZS2f0XxQIF4nljAAAAFc"]
[Fri Sep 04 03:39:57.738213 2026] [:error] [pid 31967:tid 140510198957824] [client 104.28.222.46:31996] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env"] [unique_id "apqD3YVitk-pR9VqsmexigAAANQ"], referer: https://www.google.com/search?q=www.pesema.com
[Fri Sep 04 03:39:57.754037 2026] [:error] [pid 31959:tid 140510282884864] [client 104.28.222.46:32018] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "apqD3SYZS2f0XxQIF4nljQAAAEo"], referer: https://www.google.com/search?q=www.pesema.com
[Fri Sep 04 03:39:57.774426 2026] [:error] [pid 31962:tid 140510173779712] [client 104.28.222.46:32019] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp-config.php.bak"] [unique_id "apqD3Wra8SNzD3M3w_dxIAAAAJc"]
[Fri Sep 04 03:39:57.852061 2026] [:error] [pid 31959:tid 140510316455680] [client 104.28.222.46:32032] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp-config.php"] [unique_id "apqD3SYZS2f0XxQIF4nljgAAAEY"]
[Fri Sep 04 03:39:57.857966 2026] [:error] [pid 31962:tid 140510249314048] [client 104.28.222.46:32008] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.local"] [unique_id "apqD3Wra8SNzD3M3w_dxIgAAAI4"], referer: https://www.google.com/search?q=www.pesema.com
[Fri Sep 04 03:39:57.872531 2026] [:error] [pid 31962:tid 140510266099456] [client 104.28.222.46:32030] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.production"] [unique_id "apqD3Wra8SNzD3M3w_dxIwAAAIw"]
[Fri Sep 04 03:39:57.885393 2026] [:error] [pid 31967:tid 140510207350528] [client 104.28.222.46:32023] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/HEAD"] [unique_id "apqD3YVitk-pR9VqsmexiwAAANM"], referer: https://www.google.com/search?q=www.pesema.com
[Fri Sep 04 03:40:00.904366 2026] [:error] [pid 31962:tid 140510316455680] [client 104.28.222.46:32040] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.sample"] [unique_id "apqD4Gra8SNzD3M3w_dxKAAAAIY"]
[Fri Sep 04 03:40:00.940755 2026] [:error] [pid 31967:tid 140510422763264] [client 104.28.222.46:32048] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dist"] [unique_id "apqD4IVitk-pR9VqsmexjwAAAMI"], referer: https://www.google.com/search?q=www.pesema.com
[Fri Sep 04 03:40:00.981438 2026] [:error] [pid 31962:tid 140510190565120] [client 104.28.222.46:15138] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.bak"] [unique_id "apqD4Gra8SNzD3M3w_dxKQAAAJU"]
[Fri Sep 04 03:40:01.000241 2026] [:error] [pid 31962:tid 140510405977856] [client 104.28.222.46:36581] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.old"] [unique_id "apqD4Gra8SNzD3M3w_dxKgAAAIQ"]
[Fri Sep 04 03:40:01.079806 2026] [:error] [pid 6368:tid 140510316455680] [client 104.28.222.46:54496] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.test"] [unique_id "apqD4R4uXy8mt9Xv2OZHyAAAAQY"], referer: https://www.google.com/search?q=www.pesema.com
[Fri Sep 04 03:40:01.102372 2026] [:error] [pid 6368:tid 140510266099456] [client 104.28.222.46:11758] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.production.local"] [unique_id "apqD4R4uXy8mt9Xv2OZHyQAAAQw"]
[Fri Sep 04 03:40:01.176271 2026] [:error] [pid 32150:tid 140510431155968] [client 104.28.222.46:47103] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.save"] [unique_id "apqD4XxoMEVqD2_l3OKDxAAAAAE"], referer: https://www.google.com/search?q=www.pesema.com
[Fri Sep 04 03:40:01.680595 2026] [:error] [pid 31962:tid 140510282884864] [client 104.28.222.46:32057] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.development.local"] [unique_id "apqD4Wra8SNzD3M3w_dxLAAAAIo"]
[Fri Sep 04 03:40:07.513186 2026] [autoindex:error] [pid 31967:tid 140510198957824] [client 104.28.222.46:59005] AH01276: Cannot serve directory /home/pesema/public_html/admin/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.pesema.com/admin
[Fri Sep 04 03:52:30.225147 2026] [proxy_fcgi:error] [pid 31967:tid 140510422763264] [client 138.68.43.17:43300] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 04:06:57.416482 2026] [authz_core:error] [pid 32150:tid 140510215743232] [client 138.199.19.180:37624] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Fri Sep 04 04:10:17.458347 2026] [authz_core:error] [pid 32150:tid 140510405977856] [client 31.14.138.155:55994] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Fri Sep 04 04:16:03.787898 2026] [proxy_fcgi:error] [pid 32150:tid 140510207350528] [client 193.84.108.250:45574] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 04:20:31.456439 2026] [:error] [pid 6368:tid 140510224135936] [client 8.136.198.137:54100] [client 8.136.198.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "apqNXx4uXy8mt9Xv2OZSyAAAARE"]
[Fri Sep 04 05:17:36.542607 2026] [:error] [pid 6368:tid 140510266099456] [client 136.64.188.96:40840] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.prod"] [unique_id "apqawB4uXy8mt9Xv2OZfngAAAQw"]
[Fri Sep 04 05:17:36.543784 2026] [:error] [pid 31967:tid 140510240921344] [client 136.64.188.96:40866] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wp-config.php~"] [unique_id "apqawIVitk-pR9Vqsme9lgAAAM8"]
[Fri Sep 04 05:17:36.542610 2026] [:error] [pid 6368:tid 140510439548672] [client 136.64.188.96:40872] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.example"] [unique_id "apqawB4uXy8mt9Xv2OZfnQAAAQA"]
[Fri Sep 04 05:17:36.544957 2026] [:error] [pid 31967:tid 140510274492160] [client 136.64.188.96:40956] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pesema.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pesema.com"] [uri "/storage/logs/laravel.log"] [unique_id "apqawIVitk-pR9Vqsme9lQAAAMs"]
[Fri Sep 04 05:17:36.545522 2026] [:error] [pid 31959:tid 140510215743232] [client 136.64.188.96:40940] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.local"] [unique_id "apqawCYZS2f0XxQIF4nwZAAAAFI"]
[Fri Sep 04 05:17:36.546135 2026] [:error] [pid 31959:tid 140510240921344] [client 136.64.188.96:40992] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wp-config.php.swp"] [unique_id "apqawCYZS2f0XxQIF4nwZQAAAE8"]
[Fri Sep 04 05:17:36.546571 2026] [:error] [pid 31959:tid 140510173779712] [client 136.64.188.96:40934] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.backup"] [unique_id "apqawCYZS2f0XxQIF4nwZgAAAFc"]
[Fri Sep 04 05:17:36.547408 2026] [:error] [pid 31959:tid 140510316455680] [client 136.64.188.96:40968] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.production"] [unique_id "apqawCYZS2f0XxQIF4nwZwAAAEY"]
[Fri Sep 04 05:17:36.548280 2026] [:error] [pid 31959:tid 140510282884864] [client 136.64.188.96:40962] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.old"] [unique_id "apqawCYZS2f0XxQIF4nwaQAAAEo"]
[Fri Sep 04 05:17:36.550283 2026] [:error] [pid 31959:tid 140510291277568] [client 136.64.188.96:40982] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "apqawCYZS2f0XxQIF4nwagAAAEk"]
[Fri Sep 04 05:17:36.550465 2026] [:error] [pid 31959:tid 140510257706752] [client 136.64.188.96:40888] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wp-config.php.bak"] [unique_id "apqawCYZS2f0XxQIF4nwawAAAE0"]
[Fri Sep 04 05:17:36.550847 2026] [:error] [pid 31962:tid 140510232528640] [client 136.64.188.96:40898] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.save"] [unique_id "apqawGra8SNzD3M3w_d7-wAAAJA"]
[Fri Sep 04 05:17:36.551140 2026] [:error] [pid 31959:tid 140510224135936] [client 136.64.188.96:40854] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.dev"] [unique_id "apqawCYZS2f0XxQIF4nwbAAAAFE"]
[Fri Sep 04 05:17:36.551777 2026] [:error] [pid 31967:tid 140510308062976] [client 136.64.188.96:40998] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.bak"] [unique_id "apqawIVitk-pR9Vqsme9mAAAAMc"]
[Fri Sep 04 05:17:42.079865 2026] [:error] [pid 6368:tid 140510405977856] [client 136.64.188.96:38232] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env/"] [unique_id "apqaxh4uXy8mt9Xv2OZfpwAAAQQ"]
[Fri Sep 04 05:17:42.080505 2026] [:error] [pid 31962:tid 140510224135936] [client 136.64.188.96:38226] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.ENV"] [unique_id "apqaxmra8SNzD3M3w_d8AwAAAJE"]
[Fri Sep 04 05:17:42.081268 2026] [:error] [pid 31962:tid 140510182172416] [client 136.64.188.96:38248] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env;.png"] [unique_id "apqaxmra8SNzD3M3w_d8BAAAAJY"]
[Fri Sep 04 05:17:42.082338 2026] [:error] [pid 31962:tid 140510431155968] [client 136.64.188.96:38212] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "apqaxmra8SNzD3M3w_d8BQAAAIE"]
[Fri Sep 04 05:17:42.084144 2026] [:error] [pid 31962:tid 140510405977856] [client 136.64.188.96:38198] [client 136.64.188.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env."] [unique_id "apqaxmra8SNzD3M3w_d8BgAAAIQ"]
[Fri Sep 04 05:18:26.364246 2026] [:error] [pid 32150:tid 140510316455680] [client 34.187.85.88:29202] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/../.env"] [unique_id "apqa8nxoMEVqD2_l3OKUCQAAAAY"]
[Fri Sep 04 05:18:26.366212 2026] [:error] [pid 31967:tid 140510215743232] [client 34.187.85.88:29122] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/root/.env"] [unique_id "apqa8oVitk-pR9Vqsme9uwAAANI"]
[Fri Sep 04 05:18:26.366276 2026] [:error] [pid 31959:tid 140510249314048] [client 34.187.85.88:29190] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "apqa8iYZS2f0XxQIF4nwiwAAAE4"]
[Fri Sep 04 05:18:26.367884 2026] [:error] [pid 31967:tid 140510257706752] [client 34.187.85.88:29214] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fapp/.env"] [unique_id "apqa8oVitk-pR9Vqsme9vQAAAM0"]
[Fri Sep 04 05:18:26.370913 2026] [:error] [pid 32150:tid 140510257706752] [client 34.187.85.88:29116] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/.env"] [unique_id "apqa8nxoMEVqD2_l3OKUCgAAAA0"]
[Fri Sep 04 05:18:26.373804 2026] [:error] [pid 31959:tid 140510282884864] [client 34.187.85.88:29318] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apqa8iYZS2f0XxQIF4nwjQAAAEo"]
[Fri Sep 04 05:18:26.377397 2026] [authz_core:error] [pid 31959:tid 140510431155968] [client 34.187.85.88:29378] AH01630: client denied by server configuration: /home/pesema/public_html/@fs
[Fri Sep 04 05:18:26.378418 2026] [:error] [pid 31962:tid 140510232528640] [client 34.187.85.88:29132] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/app/.env"] [unique_id "apqa8mra8SNzD3M3w_d8GwAAAJA"]
[Fri Sep 04 05:18:26.381046 2026] [:error] [pid 32150:tid 140510215743232] [client 34.187.85.88:29302] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/root/.aws/credentials.backup"] [unique_id "apqa8nxoMEVqD2_l3OKUDQAAABI"]
[Fri Sep 04 05:18:26.411558 2026] [:error] [pid 31959:tid 140510316455680] [client 34.187.85.88:29244] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/.env.local"] [unique_id "apqa8iYZS2f0XxQIF4nwkgAAAEY"]
[Fri Sep 04 05:18:26.411802 2026] [:error] [pid 31962:tid 140510439548672] [client 34.187.85.88:29198] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/../../.env"] [unique_id "apqa8mra8SNzD3M3w_d8HQAAAIA"]
[Fri Sep 04 05:18:26.417459 2026] [:error] [pid 31959:tid 140510215743232] [client 34.187.85.88:29290] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/.env.staging"] [unique_id "apqa8iYZS2f0XxQIF4nwlAAAAFI"]
[Fri Sep 04 05:18:26.420508 2026] [:error] [pid 31959:tid 140510274492160] [client 34.187.85.88:29266] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/.env.development"] [unique_id "apqa8iYZS2f0XxQIF4nwlgAAAEs"]
[Fri Sep 04 05:18:26.421112 2026] [:error] [pid 31962:tid 140510274492160] [client 34.187.85.88:29134] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/src/.env"] [unique_id "apqa8mra8SNzD3M3w_d8HgAAAIs"]
[Fri Sep 04 05:18:26.421472 2026] [:error] [pid 31962:tid 140510165387008] [client 34.187.85.88:29256] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/.env.production"] [unique_id "apqa8mra8SNzD3M3w_d8HwAAAJg"]
[Fri Sep 04 05:18:27.015500 2026] [:error] [pid 31967:tid 140510308062976] [client 34.187.85.88:29478] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/var/www/.env"] [unique_id "apqa84Vitk-pR9Vqsme9vwAAAMc"]
[Fri Sep 04 05:18:27.015813 2026] [:error] [pid 32150:tid 140510257706752] [client 34.187.85.88:29470] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/app/.env.local"] [unique_id "apqa83xoMEVqD2_l3OKUEgAAAA0"]
[Fri Sep 04 05:18:27.016457 2026] [:error] [pid 31967:tid 140510240921344] [client 34.187.85.88:29504] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/usr/src/app/.env"] [unique_id "apqa84Vitk-pR9Vqsme9wAAAAM8"]
[Fri Sep 04 05:18:27.017183 2026] [authz_core:error] [pid 31959:tid 140510190565120] [client 34.187.85.88:29514] AH01630: client denied by server configuration: /home/pesema/public_html/@fs
[Fri Sep 04 05:18:27.033192 2026] [:error] [pid 31962:tid 140510405977856] [client 34.187.85.88:29454] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/app/.env.production"] [unique_id "apqa82ra8SNzD3M3w_d8IAAAAIQ"]
[Fri Sep 04 05:18:27.035092 2026] [:error] [pid 32150:tid 140510291277568] [client 34.187.85.88:29494] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/var/www/html/.env"] [unique_id "apqa83xoMEVqD2_l3OKUEwAAAAk"]
[Fri Sep 04 05:18:27.061703 2026] [:error] [pid 17113:tid 140510215743232] [client 34.187.85.88:29516] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/home/ubuntu/.env"] [unique_id "apqa898w1k3sWgV1hkVd2gAAAVI"]
[Fri Sep 04 05:18:27.869389 2026] [authz_core:error] [pid 17113:tid 140510405977856] [client 34.187.85.88:29590] AH01630: client denied by server configuration: /home/pesema/public_html/@fs
[Fri Sep 04 05:18:27.870013 2026] [:error] [pid 31962:tid 140510414370560] [client 34.187.85.88:29662] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apqa82ra8SNzD3M3w_d8IQAAAIM"]
[Fri Sep 04 05:18:27.870508 2026] [:error] [pid 17113:tid 140510190565120] [client 34.187.85.88:29630] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apqa898w1k3sWgV1hkVd4AAAAVU"]
[Fri Sep 04 05:18:27.871941 2026] [core:error] [pid 31959:tid 140510173779712] [client 34.187.85.88:29686] AH10244: invalid URI path (/@fs/../../../../../proc/self/environ?raw??)
[Fri Sep 04 05:18:27.872074 2026] [:error] [pid 31959:tid 140510173779712] [client 34.187.85.88:29686] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:raw??" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.pesema.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.pesema.com"] [uri "/proc/self/environ"] [unique_id "apqa8yYZS2f0XxQIF4nwmgAAAFc"]
[Fri Sep 04 05:18:27.872456 2026] [:error] [pid 31962:tid 140510215743232] [client 34.187.85.88:29670] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apqa82ra8SNzD3M3w_d8JAAAAJI"]
[Fri Sep 04 05:18:27.873256 2026] [:error] [pid 31962:tid 140510257706752] [client 34.187.85.88:29616] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/etc/nginx/nginx.conf"] [unique_id "apqa82ra8SNzD3M3w_d8IgAAAI0"]
[Fri Sep 04 05:18:27.873910 2026] [authz_core:error] [pid 31959:tid 140510257706752] [client 34.187.85.88:29708] AH01630: client denied by server configuration: /home/pesema/public_html/@fs
[Fri Sep 04 05:18:27.875299 2026] [:error] [pid 31962:tid 140510422763264] [client 34.187.85.88:29626] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/etc/apache2/apache2.conf"] [unique_id "apqa82ra8SNzD3M3w_d8JQAAAII"]
[Fri Sep 04 05:18:27.876647 2026] [:error] [pid 31962:tid 140510316455680] [client 34.187.85.88:29772] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".ovh.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/root/.ovh.conf"] [unique_id "apqa82ra8SNzD3M3w_d8JgAAAIY"]
[Fri Sep 04 05:18:27.888033 2026] [:error] [pid 31959:tid 140510165387008] [client 34.187.85.88:29842] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/root/.config/gcloud/credentials.db"] [unique_id "apqa8yYZS2f0XxQIF4nwnQAAAFg"]
[Fri Sep 04 05:18:27.890598 2026] [:error] [pid 32150:tid 140510405977856] [client 34.187.85.88:29814] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".ovh.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/@fs/home/ubuntu/.ovh.conf"] [unique_id "apqa83xoMEVqD2_l3OKUFQAAAAQ"]
[Fri Sep 04 05:18:27.891282 2026] [:error] [pid 31959:tid 140510308062976] [client 34.187.85.88:29694] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/../../../../../root/.env"] [unique_id "apqa8yYZS2f0XxQIF4nwoQAAAEc"]
[Fri Sep 04 05:18:27.892433 2026] [:error] [pid 31962:tid 140510190565120] [client 34.187.85.88:29678] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/../../../../../app/.env"] [unique_id "apqa82ra8SNzD3M3w_d8KgAAAJU"]
[Fri Sep 04 05:18:28.839283 2026] [:error] [pid 32150:tid 140510207350528] [client 34.187.85.88:29928] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apqa9HxoMEVqD2_l3OKUFgAAABM"]
[Fri Sep 04 05:18:28.840086 2026] [:error] [pid 31967:tid 140510257706752] [client 34.187.85.88:29922] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/@fs/var/task/.env"] [unique_id "apqa9IVitk-pR9Vqsme9xgAAAM0"]
[Fri Sep 04 05:18:28.848020 2026] [authz_core:error] [pid 31967:tid 140510215743232] [client 34.187.85.88:29924] AH01630: client denied by server configuration: /home/pesema/public_html/@fs
[Fri Sep 04 05:18:30.130022 2026] [:error] [pid 17113:tid 140510266099456] [client 34.187.85.88:47812] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/_nuxt/../.env"] [unique_id "apqa9t8w1k3sWgV1hkVd9QAAAUw"]
[Fri Sep 04 05:18:30.130927 2026] [:error] [pid 17113:tid 140510165387008] [client 34.187.85.88:47826] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/assets../.env"] [unique_id "apqa9t8w1k3sWgV1hkVd9gAAAVg"]
[Fri Sep 04 05:18:30.131536 2026] [:error] [pid 31967:tid 140510299670272] [client 34.187.85.88:47840] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/uploads../.env"] [unique_id "apqa9oVitk-pR9Vqsme9ywAAAMg"]
[Fri Sep 04 05:18:30.131669 2026] [:error] [pid 31959:tid 140510240921344] [client 34.187.85.88:47820] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/img../.env"] [unique_id "apqa9iYZS2f0XxQIF4nwqgAAAE8"]
[Fri Sep 04 05:18:30.132681 2026] [:error] [pid 17113:tid 140510249314048] [client 34.187.85.88:47880] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v1/.env"] [unique_id "apqa9t8w1k3sWgV1hkVd9wAAAU4"]
[Fri Sep 04 05:18:30.132880 2026] [:error] [pid 17113:tid 140510316455680] [client 34.187.85.88:47870] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.docker/.env"] [unique_id "apqa9t8w1k3sWgV1hkVd-AAAAUY"]
[Fri Sep 04 05:18:30.133326 2026] [:error] [pid 31967:tid 140510198957824] [client 34.187.85.88:47854] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/images../.env"] [unique_id "apqa9oVitk-pR9Vqsme9zAAAANQ"]
[Fri Sep 04 05:18:30.133922 2026] [:error] [pid 31959:tid 140510274492160] [client 34.187.85.88:47906] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.production"] [unique_id "apqa9iYZS2f0XxQIF4nwqwAAAEs"]
[Fri Sep 04 05:18:30.134136 2026] [:error] [pid 31959:tid 140510215743232] [client 34.187.85.88:47882] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v2/.env"] [unique_id "apqa9iYZS2f0XxQIF4nwrAAAAFI"]
[Fri Sep 04 05:18:30.135111 2026] [:error] [pid 31967:tid 140510182172416] [client 34.187.85.88:47934] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.development"] [unique_id "apqa9oVitk-pR9Vqsme9zQAAANY"]
[Fri Sep 04 05:18:30.135167 2026] [:error] [pid 17113:tid 140510274492160] [client 34.187.85.88:47896] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.local"] [unique_id "apqa9t8w1k3sWgV1hkVd-QAAAUs"]
[Fri Sep 04 05:18:30.135690 2026] [:error] [pid 17113:tid 140510324848384] [client 34.187.85.88:47944] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.old"] [unique_id "apqa9t8w1k3sWgV1hkVd-gAAAUU"]
[Fri Sep 04 05:18:30.135844 2026] [:error] [pid 17113:tid 140510282884864] [client 34.187.85.88:47946] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.bak"] [unique_id "apqa9t8w1k3sWgV1hkVd-wAAAUo"]
[Fri Sep 04 05:18:30.137000 2026] [:error] [pid 17113:tid 140510173779712] [client 34.187.85.88:47940] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.staging"] [unique_id "apqa9t8w1k3sWgV1hkVd_QAAAVc"]
[Fri Sep 04 05:18:30.137792 2026] [:error] [pid 17113:tid 140510240921344] [client 34.187.85.88:48022] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/.env"] [unique_id "apqa9t8w1k3sWgV1hkVd_gAAAU8"]
[Fri Sep 04 05:18:30.138027 2026] [:error] [pid 6368:tid 140510405977856] [client 34.187.85.88:47968] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.swp"] [unique_id "apqa9h4uXy8mt9Xv2OZfzwAAAQQ"]
[Fri Sep 04 05:18:30.138358 2026] [:error] [pid 32150:tid 140510439548672] [client 34.187.85.88:47992] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/.env"] [unique_id "apqa9nxoMEVqD2_l3OKUHQAAAAA"]
[Fri Sep 04 05:18:30.139053 2026] [:error] [pid 17113:tid 140510182172416] [client 34.187.85.88:48026] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/laravel/.env"] [unique_id "apqa9t8w1k3sWgV1hkVd_wAAAVY"]
[Fri Sep 04 05:18:30.139622 2026] [:error] [pid 17113:tid 140510215743232] [client 34.187.85.88:47978] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.example"] [unique_id "apqa9t8w1k3sWgV1hkVeAAAAAVI"]
[Fri Sep 04 05:18:30.140558 2026] [:error] [pid 17113:tid 140510224135936] [client 34.187.85.88:48076] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/core/.env"] [unique_id "apqa9t8w1k3sWgV1hkVeAQAAAVE"]
[Fri Sep 04 05:18:30.140926 2026] [:error] [pid 17113:tid 140510439548672] [client 34.187.85.88:48074] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/config/.env"] [unique_id "apqa9t8w1k3sWgV1hkVeAgAAAUA"]
[Fri Sep 04 05:18:30.142407 2026] [:error] [pid 31959:tid 140510182172416] [client 34.187.85.88:48006] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend/.env"] [unique_id "apqa9iYZS2f0XxQIF4nwrQAAAFY"]
[Fri Sep 04 05:18:30.144669 2026] [:error] [pid 17113:tid 140510165387008] [client 34.187.85.88:48096] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/web/.env"] [unique_id "apqa9t8w1k3sWgV1hkVeAwAAAVg"]
[Fri Sep 04 05:18:30.145168 2026] [:error] [pid 17113:tid 140510266099456] [client 34.187.85.88:48098] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/frontend/.env"] [unique_id "apqa9t8w1k3sWgV1hkVeBAAAAUw"]
[Fri Sep 04 05:18:30.146264 2026] [:error] [pid 6368:tid 140510182172416] [client 34.187.85.88:48068] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/server/.env"] [unique_id "apqa9h4uXy8mt9Xv2OZf0AAAARY"]
[Fri Sep 04 05:18:30.148064 2026] [:error] [pid 31959:tid 140510224135936] [client 34.187.85.88:47950] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup"] [unique_id "apqa9iYZS2f0XxQIF4nwrgAAAFE"]
[Fri Sep 04 05:18:30.149815 2026] [:error] [pid 17113:tid 140510299670272] [client 34.187.85.88:47922] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env"] [unique_id "apqa9t8w1k3sWgV1hkVeBQAAAUg"]
[Fri Sep 04 05:18:30.151254 2026] [:error] [pid 32150:tid 140510405977856] [client 34.187.85.88:48032] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/docker/.env"] [unique_id "apqa9nxoMEVqD2_l3OKUHwAAAAQ"]
[Fri Sep 04 05:18:30.151493 2026] [:error] [pid 17113:tid 140510207350528] [client 34.187.85.88:48048] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin/.env"] [unique_id "apqa9t8w1k3sWgV1hkVeBgAAAVM"]
[Fri Sep 04 05:18:30.152428 2026] [:error] [pid 17113:tid 140510308062976] [client 34.187.85.88:48060] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/src/.env"] [unique_id "apqa9t8w1k3sWgV1hkVeBwAAAUc"]
[Fri Sep 04 05:18:32.266967 2026] [:error] [pid 17113:tid 140510439548672] [client 34.187.85.88:48110] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/public/.env"] [unique_id "apqa-N8w1k3sWgV1hkVeCQAAAUA"]
[Fri Sep 04 05:18:32.273369 2026] [:error] [pid 17113:tid 140510215743232] [client 34.187.85.88:48140] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/HEAD"] [unique_id "apqa-N8w1k3sWgV1hkVeCgAAAVI"]
[Fri Sep 04 05:18:32.275036 2026] [authz_core:error] [pid 31962:tid 140510439548672] [client 34.187.85.88:48180] AH01630: client denied by server configuration: /home/pesema/public_html/root
[Fri Sep 04 05:18:32.281037 2026] [:error] [pid 17113:tid 140510249314048] [client 34.187.85.88:48148] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.github/.env"] [unique_id "apqa-N8w1k3sWgV1hkVeCwAAAU4"]
[Fri Sep 04 05:18:32.287492 2026] [authz_core:error] [pid 32150:tid 140510316455680] [client 34.187.85.88:48222] AH01630: client denied by server configuration: /home/pesema/public_html/aws-credentials
[Fri Sep 04 05:18:32.288865 2026] [:error] [pid 17113:tid 140510299670272] [client 34.187.85.88:48126] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "apqa-N8w1k3sWgV1hkVeDQAAAUg"]
[Fri Sep 04 05:18:34.720677 2026] [authz_core:error] [pid 6368:tid 140510165387008] [client 34.187.85.88:48280] AH01630: client denied by server configuration: /home/pesema/public_html/credentials.json
[Fri Sep 04 05:18:37.889318 2026] [:error] [pid 6368:tid 140510198957824] [client 34.187.85.88:48610] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp-config.php.old"] [unique_id "apqa_R4uXy8mt9Xv2OZf5wAAARQ"]
[Fri Sep 04 05:18:37.893748 2026] [authz_core:error] [pid 31959:tid 140510215743232] [client 34.187.85.88:48518] AH01630: client denied by server configuration: /home/pesema/public_html/id_dsa
[Fri Sep 04 05:18:37.897127 2026] [:error] [pid 6368:tid 140510316455680] [client 34.187.85.88:48598] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp-config.php.bak"] [unique_id "apqa_R4uXy8mt9Xv2OZf6AAAAQY"]
[Fri Sep 04 05:18:37.897849 2026] [:error] [pid 17113:tid 140510240921344] [client 34.187.85.88:48550] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/privatekey.key"] [unique_id "apqa_d8w1k3sWgV1hkVeGQAAAU8"]
[Fri Sep 04 05:18:37.902364 2026] [:error] [pid 31962:tid 140510257706752] [client 34.187.85.88:48540] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/server.key"] [unique_id "apqa_Wra8SNzD3M3w_d8RAAAAI0"]
[Fri Sep 04 05:18:37.904260 2026] [:error] [pid 6368:tid 140510414370560] [client 34.187.85.88:48644] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/config.php.bak"] [unique_id "apqa_R4uXy8mt9Xv2OZf6QAAAQM"]
[Fri Sep 04 05:18:37.906018 2026] [proxy_fcgi:error] [pid 6368:tid 140510257706752] [client 34.187.85.88:48614] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 05:18:37.906991 2026] [authz_core:error] [pid 31962:tid 140510207350528] [client 34.187.85.88:48618] AH01630: client denied by server configuration: /home/pesema/public_html/config
[Fri Sep 04 05:18:37.910430 2026] [:error] [pid 6368:tid 140510282884864] [client 34.187.85.88:48638] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp-config.php"] [unique_id "apqa_R4uXy8mt9Xv2OZf6wAAAQo"]
[Fri Sep 04 05:18:42.941464 2026] [authz_core:error] [pid 32150:tid 140510414370560] [client 34.187.85.88:40278] AH01630: client denied by server configuration: /home/pesema/public_html/actuator
[Fri Sep 04 05:18:42.945914 2026] [authz_core:error] [pid 17113:tid 140510282884864] [client 34.187.85.88:40360] AH01630: client denied by server configuration: /home/pesema/public_html/.codex
[Fri Sep 04 05:18:42.946405 2026] [:error] [pid 31962:tid 140510190565120] [client 34.187.85.88:40432] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.openclaw/.env"] [unique_id "apqbAmra8SNzD3M3w_d8SgAAAJU"]
[Fri Sep 04 05:18:42.946960 2026] [:error] [pid 31962:tid 140510282884864] [client 34.187.85.88:40514] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.js"] [unique_id "apqbAmra8SNzD3M3w_d8TAAAAIo"]
[Fri Sep 04 05:18:42.949294 2026] [authz_core:error] [pid 17113:tid 140510324848384] [client 34.187.85.88:40536] AH01630: client denied by server configuration: /home/pesema/public_html/login
[Fri Sep 04 05:18:42.953037 2026] [:error] [pid 6368:tid 140510173779712] [client 34.187.85.88:40376] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.hermes/.env"] [unique_id "apqbAh4uXy8mt9Xv2OZf7wAAARc"]
[Fri Sep 04 05:18:48.945305 2026] [:error] [pid 31967:tid 140510422763264] [client 34.187.85.88:40610] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.htpasswd"] [unique_id "apqbCIVitk-pR9Vqsme93wAAAMI"]
[Fri Sep 04 05:18:48.949622 2026] [proxy_fcgi:error] [pid 17113:tid 140510232528640] [client 34.187.85.88:40588] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 05:18:48.950012 2026] [:error] [pid 31962:tid 140510308062976] [client 34.187.85.88:40640] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.prod"] [unique_id "apqbCGra8SNzD3M3w_d8UwAAAIc"]
[Fri Sep 04 05:18:48.952812 2026] [proxy_fcgi:error] [pid 6368:tid 140510431155968] [client 34.187.85.88:40602] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 05:18:48.952949 2026] [:error] [pid 6368:tid 140510173779712] [client 34.187.85.88:40650] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env~"] [unique_id "apqbCB4uXy8mt9Xv2OZf_AAAARc"]
[Fri Sep 04 05:18:48.961498 2026] [:error] [pid 6368:tid 140510439548672] [client 34.187.85.88:40674] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/_next/../.env"] [unique_id "apqbCB4uXy8mt9Xv2OZf_gAAAQA"]
[Fri Sep 04 05:18:48.992350 2026] [autoindex:error] [pid 17113:tid 140510439548672] [client 34.187.85.88:40678] AH01276: Cannot serve directory /home/pesema/public_html/admin/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.pesema.com/admin
[Fri Sep 04 05:18:55.027539 2026] [authz_core:error] [pid 17113:tid 140510414370560] [client 34.187.85.88:6990] AH01630: client denied by server configuration: /home/pesema/public_html/.bash_profile
[Fri Sep 04 05:18:55.042105 2026] [:error] [pid 31962:tid 140510165387008] [client 34.187.85.88:7076] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.anthropic"] [unique_id "apqbD2ra8SNzD3M3w_d8VgAAAJg"]
[Fri Sep 04 05:18:55.042148 2026] [:error] [pid 32150:tid 140510215743232] [client 34.187.85.88:6986] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/_next/static/../.env"] [unique_id "apqbD3xoMEVqD2_l3OKUOAAAABI"]
[Fri Sep 04 05:18:55.043021 2026] [authz_core:error] [pid 32150:tid 140510224135936] [client 34.187.85.88:7038] AH01630: client denied by server configuration: /home/pesema/public_html/gcp-service-account.json
[Fri Sep 04 05:18:55.043031 2026] [:error] [pid 31959:tid 140510182172416] [client 34.187.85.88:7060] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.vault"] [unique_id "apqbDyYZS2f0XxQIF4nwwwAAAFY"]
[Fri Sep 04 05:18:55.043996 2026] [:error] [pid 32150:tid 140510324848384] [client 34.187.85.88:7062] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.openai"] [unique_id "apqbD3xoMEVqD2_l3OKUOgAAAAU"]
[Fri Sep 04 05:18:55.045256 2026] [authz_core:error] [pid 31962:tid 140510182172416] [client 34.187.85.88:7150] AH01630: client denied by server configuration: /home/pesema/public_html/static..
[Fri Sep 04 05:18:55.046917 2026] [authz_core:error] [pid 32150:tid 140510190565120] [client 34.187.85.88:7162] AH01630: client denied by server configuration: /home/pesema/public_html/media..
[Fri Sep 04 05:18:55.049568 2026] [:error] [pid 31959:tid 140510215743232] [client 34.187.85.88:7092] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/config/master.key"] [unique_id "apqbDyYZS2f0XxQIF4nwxAAAAFI"]
[Fri Sep 04 05:18:55.057990 2026] [authz_core:error] [pid 17113:tid 140510257706752] [client 34.187.85.88:7044] AH01630: client denied by server configuration: /home/pesema/public_html/application_default_credentials.json
[Fri Sep 04 05:19:02.121479 2026] [:error] [pid 6368:tid 140510439548672] [client 34.187.85.88:1964] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/client/.env"] [unique_id "apqbFh4uXy8mt9Xv2OZgFgAAAQA"]
[Fri Sep 04 05:19:02.121831 2026] [:error] [pid 17113:tid 140510316455680] [client 34.187.85.88:1996] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/production/.env"] [unique_id "apqbFt8w1k3sWgV1hkVeXwAAAUY"]
[Fri Sep 04 05:19:02.121918 2026] [:error] [pid 6368:tid 140510257706752] [client 34.187.85.88:1988] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dev/.env"] [unique_id "apqbFh4uXy8mt9Xv2OZgFwAAAQ0"]
[Fri Sep 04 05:19:02.122058 2026] [:error] [pid 32150:tid 140510291277568] [client 34.187.85.88:1954] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/.env.production"] [unique_id "apqbFnxoMEVqD2_l3OKURwAAAAk"]
[Fri Sep 04 05:19:02.123191 2026] [:error] [pid 6368:tid 140510324848384] [client 34.187.85.88:2006] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/staging/.env"] [unique_id "apqbFh4uXy8mt9Xv2OZgGQAAAQU"]
[Fri Sep 04 05:19:02.123601 2026] [:error] [pid 17113:tid 140510215743232] [client 34.187.85.88:2020] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.docker"] [unique_id "apqbFt8w1k3sWgV1hkVeYAAAAVI"]
[Fri Sep 04 05:19:02.124894 2026] [:error] [pid 17113:tid 140510274492160] [client 34.187.85.88:1980] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backup/.env"] [unique_id "apqbFt8w1k3sWgV1hkVeYQAAAUs"]
[Fri Sep 04 05:19:02.129126 2026] [:error] [pid 6368:tid 140510414370560] [client 34.187.85.88:1950] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/.env.local"] [unique_id "apqbFh4uXy8mt9Xv2OZgHAAAAQM"]
[Fri Sep 04 05:19:02.131018 2026] [authz_core:error] [pid 31962:tid 140510439548672] [client 34.187.85.88:2050] AH01630: client denied by server configuration: /home/pesema/public_html/.azure
[Fri Sep 04 05:19:02.134171 2026] [authz_core:error] [pid 31962:tid 140510190565120] [client 34.187.85.88:2062] AH01630: client denied by server configuration: /home/pesema/public_html/creds.json
[Fri Sep 04 05:19:09.953919 2026] [authz_core:error] [pid 17113:tid 140510299670272] [client 34.187.85.88:64494] AH01630: client denied by server configuration: /home/pesema/public_html/config
[Fri Sep 04 05:19:09.958410 2026] [authz_core:error] [pid 32150:tid 140510291277568] [client 34.187.85.88:64516] AH01630: client denied by server configuration: /home/pesema/public_html/config
[Fri Sep 04 05:19:09.967021 2026] [authz_core:error] [pid 17113:tid 140510249314048] [client 34.187.85.88:64546] AH01630: client denied by server configuration: /home/pesema/public_html/config
[Fri Sep 04 05:19:19.489420 2026] [authz_core:error] [pid 31962:tid 140510257706752] [client 34.187.85.88:50032] AH01630: client denied by server configuration: /home/pesema/public_html/bootstrap.yml
[Fri Sep 04 05:19:19.490350 2026] [:error] [pid 32150:tid 140510182172416] [client 34.187.85.88:50082] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/web.config"] [unique_id "apqbJ3xoMEVqD2_l3OKUWgAAABY"]
[Fri Sep 04 05:19:28.279187 2026] [:error] [pid 31967:tid 140510198957824] [client 34.187.85.88:50104] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/rclone.conf"] [unique_id "apqbMIVitk-pR9Vqsme9_QAAANQ"]
[Fri Sep 04 05:19:28.302817 2026] [:error] [pid 17113:tid 140510198957824] [client 34.187.85.88:50138] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/ssl/server.key"] [unique_id "apqbMN8w1k3sWgV1hkVemwAAAVQ"]
[Fri Sep 04 05:19:28.306778 2026] [:error] [pid 17113:tid 140510240921344] [client 34.187.85.88:50150] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/ssl/localhost.key"] [unique_id "apqbMN8w1k3sWgV1hkVenAAAAU8"]
[Fri Sep 04 05:19:28.315193 2026] [:error] [pid 17113:tid 140510291277568] [client 34.187.85.88:50162] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/localhost.key"] [unique_id "apqbMN8w1k3sWgV1hkVenQAAAUk"]
[Fri Sep 04 05:19:28.315328 2026] [:error] [pid 6368:tid 140510274492160] [client 34.187.85.88:50168] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/host.key"] [unique_id "apqbMB4uXy8mt9Xv2OZgNQAAAQs"]
[Fri Sep 04 05:19:28.322662 2026] [:error] [pid 31959:tid 140510257706752] [client 34.187.85.88:50176] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/configuration.php.bak"] [unique_id "apqbMCYZS2f0XxQIF4nw1wAAAE0"]
[Fri Sep 04 05:19:28.330838 2026] [authz_core:error] [pid 31962:tid 140510282884864] [client 34.187.85.88:50238] AH01630: client denied by server configuration: /home/pesema/public_html/settings.js
[Fri Sep 04 05:19:28.382304 2026] [authz_core:error] [pid 31967:tid 140510308062976] [client 34.187.85.88:50350] AH01630: client denied by server configuration: /home/pesema/public_html/__debug__
[Fri Sep 04 05:19:28.383496 2026] [authz_core:error] [pid 31967:tid 140510224135936] [client 34.187.85.88:50340] AH01630: client denied by server configuration: /home/pesema/public_html/telescope
[Fri Sep 04 05:19:36.300778 2026] [:error] [pid 31959:tid 140510414370560] [client 34.187.85.88:54228] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.svn/entries"] [unique_id "apqbOCYZS2f0XxQIF4nw4AAAAEM"]
[Fri Sep 04 05:19:36.383001 2026] [:error] [pid 31967:tid 140510198957824] [client 34.187.85.88:54310] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/aws/.env"] [unique_id "apqbOIVitk-pR9Vqsme-DgAAANQ"]
[Fri Sep 04 05:19:36.384677 2026] [:error] [pid 31967:tid 140510316455680] [client 34.187.85.88:54326] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/aws/.env.production"] [unique_id "apqbOIVitk-pR9Vqsme-DwAAAMY"]
[Fri Sep 04 05:19:36.388207 2026] [:error] [pid 31967:tid 140510274492160] [client 34.187.85.88:54342] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/.aws/credentials.bak"] [unique_id "apqbOIVitk-pR9Vqsme-EAAAAMs"]
[Fri Sep 04 05:19:36.392347 2026] [:error] [pid 31962:tid 140510198957824] [client 34.187.85.88:54350] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/.aws/credentials.old"] [unique_id "apqbOGra8SNzD3M3w_d8cwAAAJQ"]
[Fri Sep 04 05:19:45.981209 2026] [:error] [pid 31962:tid 140510414370560] [client 34.187.85.88:63376] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/node/.env"] [unique_id "apqbQWra8SNzD3M3w_d8hgAAAIM"]
[Fri Sep 04 05:19:45.981795 2026] [:error] [pid 17113:tid 140510232528640] [client 34.187.85.88:63456] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend/api/.env"] [unique_id "apqbQd8w1k3sWgV1hkVewgAAAVA"]
[Fri Sep 04 05:19:45.982426 2026] [:error] [pid 31959:tid 140510422763264] [client 34.187.85.88:63222] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/var/www/.env"] [unique_id "apqbQSYZS2f0XxQIF4nw6QAAAEI"]
[Fri Sep 04 05:19:45.983047 2026] [:error] [pid 32150:tid 140510299670272] [client 34.187.85.88:63324] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/back/.env"] [unique_id "apqbQXxoMEVqD2_l3OKUdgAAAAg"]
[Fri Sep 04 05:19:45.983119 2026] [:error] [pid 6368:tid 140510257706752] [client 34.187.85.88:63468] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/frontend/.env.local"] [unique_id "apqbQR4uXy8mt9Xv2OZgTwAAAQ0"]
[Fri Sep 04 05:19:45.983653 2026] [:error] [pid 31962:tid 140510173779712] [client 34.187.85.88:63348] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/stage/.env"] [unique_id "apqbQWra8SNzD3M3w_d8hwAAAJc"]
[Fri Sep 04 05:19:45.983902 2026] [:error] [pid 6368:tid 140510274492160] [client 34.187.85.88:63428] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/private/.env"] [unique_id "apqbQR4uXy8mt9Xv2OZgUAAAAQs"]
[Fri Sep 04 05:19:45.983946 2026] [:error] [pid 6368:tid 140510431155968] [client 34.187.85.88:63470] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/frontend/.env.production"] [unique_id "apqbQR4uXy8mt9Xv2OZgUQAAAQE"]
[Fri Sep 04 05:19:45.984145 2026] [:error] [pid 32150:tid 140510198957824] [client 34.187.85.88:63234] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sendgrid/.env"] [unique_id "apqbQXxoMEVqD2_l3OKUeAAAABQ"]
[Fri Sep 04 05:19:45.984273 2026] [:error] [pid 31962:tid 140510422763264] [client 34.187.85.88:63292] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mail/.env"] [unique_id "apqbQWra8SNzD3M3w_d8iAAAAII"]
[Fri Sep 04 05:19:45.984313 2026] [:error] [pid 32150:tid 140510308062976] [client 34.187.85.88:63306] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/stripe/.env"] [unique_id "apqbQXxoMEVqD2_l3OKUeQAAAAc"]
[Fri Sep 04 05:19:45.984680 2026] [:error] [pid 17113:tid 140510182172416] [client 34.187.85.88:63414] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/backend/.env"] [unique_id "apqbQd8w1k3sWgV1hkVewwAAAVY"]
[Fri Sep 04 05:19:45.984871 2026] [:error] [pid 32150:tid 140510207350528] [client 34.187.85.88:63252] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/var/www/html/.env"] [unique_id "apqbQXxoMEVqD2_l3OKUegAAABM"]
[Fri Sep 04 05:19:45.985065 2026] [:error] [pid 31962:tid 140510240921344] [client 34.187.85.88:63360] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/development/.env"] [unique_id "apqbQWra8SNzD3M3w_d8iQAAAI8"]
[Fri Sep 04 05:19:45.985450 2026] [:error] [pid 6368:tid 140510198957824] [client 34.187.85.88:63398] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/test/.env"] [unique_id "apqbQR4uXy8mt9Xv2OZgUgAAARQ"]
[Fri Sep 04 05:19:45.985484 2026] [:error] [pid 6368:tid 140510266099456] [client 34.187.85.88:63434] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend/.env.local"] [unique_id "apqbQR4uXy8mt9Xv2OZgUwAAAQw"]
[Fri Sep 04 05:19:45.986678 2026] [:error] [pid 17113:tid 140510414370560] [client 34.187.85.88:63440] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend/.env.production"] [unique_id "apqbQd8w1k3sWgV1hkVexAAAAUM"]
[Fri Sep 04 05:19:45.990136 2026] [:error] [pid 32150:tid 140510224135936] [client 34.187.85.88:63258] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/email/.env"] [unique_id "apqbQXxoMEVqD2_l3OKUfQAAABE"]
[Fri Sep 04 05:19:45.990735 2026] [:error] [pid 6368:tid 140510240921344] [client 34.187.85.88:63332] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend-api/.env"] [unique_id "apqbQR4uXy8mt9Xv2OZgVAAAAQ8"]
[Fri Sep 04 05:19:45.991320 2026] [:error] [pid 6368:tid 140510308062976] [client 34.187.85.88:63474] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/internal/.env"] [unique_id "apqbQR4uXy8mt9Xv2OZgVQAAAQc"]
[Fri Sep 04 05:19:45.995125 2026] [:error] [pid 31959:tid 140510405977856] [client 34.187.85.88:63396] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/services/.env"] [unique_id "apqbQSYZS2f0XxQIF4nw7AAAAEQ"]
[Fri Sep 04 05:19:45.997851 2026] [:error] [pid 6368:tid 140510324848384] [client 34.187.85.88:63390] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/prod/.env"] [unique_id "apqbQR4uXy8mt9Xv2OZgVgAAAQU"]
[Fri Sep 04 05:19:45.998455 2026] [:error] [pid 6368:tid 140510299670272] [client 34.187.85.88:63420] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/api/.env"] [unique_id "apqbQR4uXy8mt9Xv2OZgVwAAAQg"]
[Fri Sep 04 05:19:53.563541 2026] [:error] [pid 6368:tid 140510324848384] [client 34.187.85.88:26338] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/src/.env.local"] [unique_id "apqbSR4uXy8mt9Xv2OZgXwAAAQU"]
[Fri Sep 04 05:19:53.565823 2026] [:error] [pid 17113:tid 140510182172416] [client 34.187.85.88:26342] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/src/.env.production"] [unique_id "apqbSd8w1k3sWgV1hkVe1QAAAVY"]
[Fri Sep 04 05:19:53.573074 2026] [:error] [pid 31959:tid 140510324848384] [client 34.187.85.88:26388] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/apps/backend/.env"] [unique_id "apqbSSYZS2f0XxQIF4nw7wAAAEU"]
[Fri Sep 04 05:19:53.573994 2026] [:error] [pid 31967:tid 140510224135936] [client 34.187.85.88:26392] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/database/.env"] [unique_id "apqbSYVitk-pR9Vqsme-GwAAANE"]
[Fri Sep 04 05:19:53.574664 2026] [:error] [pid 31967:tid 140510282884864] [client 34.187.85.88:26438] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.testing"] [unique_id "apqbSYVitk-pR9Vqsme-HAAAAMo"]
[Fri Sep 04 05:19:53.575816 2026] [:error] [pid 32150:tid 140510190565120] [client 34.187.85.88:26368] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin/.env.local"] [unique_id "apqbSXxoMEVqD2_l3OKUgQAAABU"]
[Fri Sep 04 05:19:53.581926 2026] [:error] [pid 32150:tid 140510182172416] [client 34.187.85.88:26364] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/server/.env.production"] [unique_id "apqbSXxoMEVqD2_l3OKUhAAAABY"]
[Fri Sep 04 05:19:53.582859 2026] [:error] [pid 32150:tid 140510249314048] [client 34.187.85.88:26344] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/src/api/.env"] [unique_id "apqbSXxoMEVqD2_l3OKUhQAAAA4"]
[Fri Sep 04 05:19:53.583926 2026] [:error] [pid 32150:tid 140510165387008] [client 34.187.85.88:26384] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin/.env.production"] [unique_id "apqbSXxoMEVqD2_l3OKUhgAAABg"]
[Fri Sep 04 05:19:53.585194 2026] [:error] [pid 31967:tid 140510414370560] [client 34.187.85.88:26356] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/server/.env.local"] [unique_id "apqbSYVitk-pR9Vqsme-HQAAAMM"]
[Fri Sep 04 05:19:53.586685 2026] [:error] [pid 32150:tid 140510257706752] [client 34.187.85.88:26382] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/apps/api/.env"] [unique_id "apqbSXxoMEVqD2_l3OKUhwAAAA0"]
[Fri Sep 04 05:19:53.592935 2026] [:error] [pid 6368:tid 140510299670272] [client 34.187.85.88:26424] [client 34.187.85.88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pesema.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pesema.com"] [uri "/credentials.ini"] [unique_id "apqbSR4uXy8mt9Xv2OZgYAAAAQg"]
[Fri Sep 04 05:21:07.636092 2026] [:error] [pid 6368:tid 140510249314048] [client 94.247.172.129:47277] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apqbkx4uXy8mt9Xv2OZgkwAAAQ4"]
[Fri Sep 04 06:15:40.883320 2026] [:error] [pid 13412:tid 140510266099456] [client 170.106.35.153:54284] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apqoXJA6d6p7DGMMWtxW2AAAAcw"]
[Fri Sep 04 06:20:14.877875 2026] [:error] [pid 31962:tid 140510422763264] [client 45.79.217.159:34948] [client 45.79.217.159] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/language/en-GB/en-GB.xml"] [unique_id "apqpbmra8SNzD3M3w_eBJwAAAII"]
[Fri Sep 04 06:20:15.554514 2026] [:error] [pid 31962:tid 140510414370560] [client 45.79.217.159:35076] [client 45.79.217.159] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/media/system/js/core.js"] [unique_id "apqpb2ra8SNzD3M3w_eBLwAAAIM"]
[Fri Sep 04 06:20:16.034346 2026] [:error] [pid 13370:tid 140510165387008] [client 45.79.217.159:35332] [client 45.79.217.159] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zzx9q7_not_exist_8123x/"] [unique_id "apqpcPB8SKAjNeqhClkuowAAAZg"]
[Fri Sep 04 07:04:50.797817 2026] [:error] [pid 17113:tid 140510439548672] [client 43.153.85.46:53702] [client 43.153.85.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apqz4t8w1k3sWgV1hkVzrwAAAUA"]
[Fri Sep 04 08:10:13.299615 2026] [proxy_fcgi:error] [pid 31959:tid 140510249314048] [client 159.89.149.162:34294] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 08:23:13.649763 2026] [proxy_fcgi:error] [pid 17113:tid 140510249314048] [client 62.84.185.11:56250] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 08:37:34.152218 2026] [:error] [pid 31967:tid 140510299670272] [client 1.13.158.23:49584] [client 1.13.158.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "aprJnoVitk-pR9VqsmfrBgAAAMg"]
[Fri Sep 04 09:39:22.211331 2026] [proxy_fcgi:error] [pid 24663:tid 139836065306368] [client 165.22.154.37:62789] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 10:00:04.654446 2026] [:error] [pid 4271:tid 139835956201216] [client 195.178.110.53:25964] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||pesema.com|F|2"] [data "Matched Data: `id found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var cp=process.mainmodule.require(child_process) var out try{out=cp.execsync(`id hostname pwd` {timeout:12000 maxbuffer:10485760 shell:/bin/sh}).tostring() }catch(e){out=((e.stdout&&e.stdout.tostring())||)+((e.stderr&&e.stderr.tostring())||)+n[exit +(e.status==null??:e.status)+] }throw object.assign(new error(next_redirect) {digest:next_redirect push/login?a=+encodeuricomp..."] [se [hostname "pesema.com"] [uri "/api/auth/signin"] [unique_id "aprc9L1v-0poMixkHO7vhAAAANQ"]
[Fri Sep 04 10:00:08.208241 2026] [:error] [pid 24663:tid 139835998164736] [client 195.178.110.53:25976] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||pesema.com|F|2"] [data "Matched Data: `id found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var cp=process.mainmodule.require(child_process) var out try{out=cp.execsync(`id hostname pwd` {timeout:12000 maxbuffer:10485760 shell:/bin/sh}).tostring() }catch(e){out=((e.stdout&&e.stdout.tostring())||)+((e.stderr&&e.stderr.tostring())||)+n[exit +(e.status==null??:e.status)+] }throw object.assign(new error(next_redirect) {digest:next_redirect push/login?a=+encodeuricomp..."] [se [hostname "pesema.com"] [uri "/api/auth/signin"] [unique_id "aprc-KVXsOWHJ0H4mZ2nYgAAAQ8"]
[Fri Sep 04 10:03:46.827601 2026] [:error] [pid 4271:tid 139836160067328] [client 195.178.110.53:5702] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/index.php"] [unique_id "aprd0r1v-0poMixkHO7xCQAAAMQ"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:03:59.312185 2026] [:error] [pid 24663:tid 139836185245440] [client 195.178.110.53:9012] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/"] [unique_id "aprd36VXsOWHJ0H4mZ2oAQAAAQE"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:04:11.142990 2026] [:error] [pid 24849:tid 139836040128256] [client 195.178.110.53:18912] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aprd67-ZfnRvwt8ILXzIxwAAAUo"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:04:15.177843 2026] [:error] [pid 24663:tid 139835931023104] [client 195.178.110.53:18916] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/wp-json/Batch/v1"] [unique_id "aprd76VXsOWHJ0H4mZ2oEAAAARc"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:04:23.647391 2026] [:error] [pid 24663:tid 139835981379328] [client 195.178.110.53:23372] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp//wp-json/batch/v1"] [unique_id "aprd96VXsOWHJ0H4mZ2oJQAAARE"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:04:34.654484 2026] [:error] [pid 25287:tid 139835947808512] [client 195.178.110.53:42852] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/wp-json/batch/v1/"] [unique_id "apreAmcxhm2BA-XilttobQAAAFU"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:04:38.920128 2026] [:error] [pid 25287:tid 139835922630400] [client 195.178.110.53:42864] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/blog/wp-json/batch/v1"] [unique_id "apreBmcxhm2BA-XilttoewAAAFg"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:04:46.713330 2026] [:error] [pid 4271:tid 139836176852736] [client 195.178.110.53:61704] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/wordpress/wp-json/batch/v1"] [unique_id "apreDr1v-0poMixkHO7xjwAAAMI"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:04:50.223622 2026] [:error] [pid 25287:tid 139835922630400] [client 195.178.110.53:61710] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/index.php"] [unique_id "apreEmcxhm2BA-XilttohwAAAFg"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:04:52.814031 2026] [:error] [pid 24849:tid 139835939415808] [client 195.178.110.53:61712] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/index.php"] [unique_id "apreFL-ZfnRvwt8ILXzI_QAAAVY"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:05:00.156513 2026] [:error] [pid 24849:tid 139835998164736] [client 195.178.110.53:29358] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/"] [unique_id "apreHL-ZfnRvwt8ILXzJBAAAAU8"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:05:11.543561 2026] [:error] [pid 25287:tid 139836082091776] [client 195.178.110.53:32282] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/"] [unique_id "apreJ2cxhm2BA-XilttongAAAEU"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:05:16.095801 2026] [:error] [pid 4271:tid 139835981379328] [client 195.178.110.53:1632] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "apreLL1v-0poMixkHO7x1gAAANE"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:05:23.922159 2026] [:error] [pid 4271:tid 139835964593920] [client 195.178.110.53:1644] [client 195.178.110.53] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/wp/wp-json/Batch/v1"] [unique_id "apreM71v-0poMixkHO7x7QAAANM"], referer: https://pesema.com/wp/wp-admin/
[Fri Sep 04 10:19:35.726576 2026] [:error] [pid 4271:tid 139836040128256] [client 43.130.32.245:40734] [client 43.130.32.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "aprhh71v-0poMixkHO75GAAAAMo"]
[Fri Sep 04 10:46:15.232188 2026] [proxy_fcgi:error] [pid 4271:tid 139836082091776] [client 157.230.62.47:57550] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 11:07:35.502977 2026] [:error] [pid 24849:tid 139836006557440] [client 43.130.78.203:38722] [client 43.130.78.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "aprsx7-ZfnRvwt8ILXzTXwAAAU4"]
[Fri Sep 04 11:20:54.848432 2026] [:error] [pid 24655:tid 139835956201216] [client 45.33.74.165:41436] [client 45.33.74.165] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/administrator/manifests/files/joomla.xml"] [unique_id "aprv5kbe9YolR341DZsB_AAAABQ"]
[Fri Sep 04 11:20:55.280825 2026] [:error] [pid 24849:tid 139836185245440] [client 45.33.74.165:41698] [client 45.33.74.165] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/language/en-GB/en-GB.xml"] [unique_id "aprv57-ZfnRvwt8ILXzVsAAAAUE"]
[Fri Sep 04 11:20:55.640557 2026] [:error] [pid 4271:tid 139836023342848] [client 45.33.74.165:41852] [client 45.33.74.165] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/media/system/js/core.js"] [unique_id "aprv571v-0poMixkHO4OWwAAAMw"]
[Fri Sep 04 11:20:56.040577 2026] [:error] [pid 24659:tid 139835998164736] [client 45.33.74.165:42074] [client 45.33.74.165] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/zzx9q7_not_exist_8123x/"] [unique_id "aprv6L9biTmX3wpIKIRtsgAAAI8"]
[Fri Sep 04 11:43:02.404712 2026] [proxy_fcgi:error] [pid 24849:tid 139836193638144] [client 157.230.238.225:33082] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 11:59:04.028314 2026] [:error] [pid 25287:tid 139836160067328] [client 195.178.110.15:30088] [client 195.178.110.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wp-config.php-backup"] [unique_id "apr42Gcxhm2BA-XiltuOhQAAAEQ"]
[Fri Sep 04 12:55:45.883909 2026] [:error] [pid 30364:tid 139836176852736] [client 195.178.110.72:50468] [client 195.178.110.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||pesema.com|F|2"] [data "Matched Data: `id found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var cp=process.mainmodule.require(child_process) var out try{out=cp.execsync(`id hostname pwd` {timeout:12000 maxbuffer:10485760 shell:/bin/sh}).tostring() }catch(e){out=((e.stdout&&e.stdout.tostring())||)+((e.stderr&&e.stderr.tostring())||)+n[exit +(e.status==null??:e.status)+] }throw object.assign(new error(next_redirect) {digest:next_redirect push/login?a=+encodeuricomp..."] [se [hostname "pesema.com"] [uri "/signup"] [unique_id "apsGIXa30PW9ubh-i2UiuQAAAYI"]
[Fri Sep 04 13:56:02.629617 2026] [:error] [pid 25287:tid 139835931023104] [client 195.178.110.108:19888] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||pesema.com|F|2"] [data "Matched Data: `id found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var cp=process.mainmodule.require(child_process) var out try{out=cp.execsync(`id hostname pwd` {timeout:12000 maxbuffer:10485760 shell:/bin/sh}).tostring() }catch(e){out=((e.stdout&&e.stdout.tostring())||)+((e.stderr&&e.stderr.tostring())||)+n[exit +(e.status==null??:e.status)+] }throw object.assign(new error(next_redirect) {digest:next_redirect push/login?a=+encodeuricomp..."] [se [hostname "pesema.com"] [uri "/"] [unique_id "apsUQmcxhm2BA-XiltutYgAAAFc"]
[Fri Sep 04 13:56:25.635161 2026] [:error] [pid 30364:tid 139836065306368] [client 195.178.110.108:16160] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||pesema.com|F|2"] [data "Matched Data: `id found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var cp=process.mainmodule.require(child_process) var out try{out=cp.execsync(`id hostname pwd` {timeout:12000 maxbuffer:10485760 shell:/bin/sh}).tostring() }catch(e){out=((e.stdout&&e.stdout.tostring())||)+((e.stderr&&e.stderr.tostring())||)+n[exit +(e.status==null??:e.status)+] }throw object.assign(new error(next_redirect) {digest:next_redirect push/login?a=+encodeuricomp..."] [se [hostname "pesema.com"] [uri "/signin"] [unique_id "apsUWXa30PW9ubh-i2U3CAAAAYc"]
[Fri Sep 04 13:57:02.072527 2026] [:error] [pid 24849:tid 139836082091776] [client 195.178.110.108:7014] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||pesema.com|F|2"] [data "Matched Data: `id found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var cp=process.mainmodule.require(child_process) var out try{out=cp.execsync(`id hostname pwd` {timeout:12000 maxbuffer:10485760 shell:/bin/sh}).tostring() }catch(e){out=((e.stdout&&e.stdout.tostring())||)+((e.stderr&&e.stderr.tostring())||)+n[exit +(e.status==null??:e.status)+] }throw object.assign(new error(next_redirect) {digest:next_redirect push/login?a=+encodeuricomp..."] [se [hostname "pesema.com"] [uri "/signup"] [unique_id "apsUfr-ZfnRvwt8ILXzt6wAAAUU"]
[Fri Sep 04 13:57:57.067927 2026] [:error] [pid 24849:tid 139836160067328] [client 195.178.110.108:34950] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||pesema.com|F|2"] [data "Matched Data: `id found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var cp=process.mainmodule.require(child_process) var out try{out=cp.execsync(`id hostname pwd` {timeout:12000 maxbuffer:10485760 shell:/bin/sh}).tostring() }catch(e){out=((e.stdout&&e.stdout.tostring())||)+((e.stderr&&e.stderr.tostring())||)+n[exit +(e.status==null??:e.status)+] }throw object.assign(new error(next_redirect) {digest:next_redirect push/login?a=+encodeuricomp..."] [se [hostname "pesema.com"] [uri "/dashboard"] [unique_id "apsUtb-ZfnRvwt8ILXzuCgAAAUQ"]
[Fri Sep 04 13:57:59.687058 2026] [:error] [pid 25287:tid 139835981379328] [client 195.178.110.108:34962] [client 195.178.110.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||pesema.com|F|2"] [data "Matched Data: `id found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var cp=process.mainmodule.require(child_process) var out try{out=cp.execsync(`id hostname pwd` {timeout:12000 maxbuffer:10485760 shell:/bin/sh}).tostring() }catch(e){out=((e.stdout&&e.stdout.tostring())||)+((e.stderr&&e.stderr.tostring())||)+n[exit +(e.status==null??:e.status)+] }throw object.assign(new error(next_redirect) {digest:next_redirect push/login?a=+encodeuricomp..."] [se [hostname "pesema.com"] [uri "/dashboard"] [unique_id "apsUt2cxhm2BA-Xiltut2wAAAFE"]
[Fri Sep 04 13:59:48.002612 2026] [:error] [pid 30364:tid 139836176852736] [client 124.221.163.189:55622] [client 124.221.163.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apsVI3a30PW9ubh-i2U3-gAAAYI"]
[Fri Sep 04 14:02:02.583788 2026] [proxy_fcgi:error] [pid 30364:tid 139836014950144] [client 45.8.205.255:50852] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 14:54:57.782910 2026] [proxy_fcgi:error] [pid 13658:tid 139836160067328] [client 87.106.32.238:60992] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 15:18:13.086089 2026] [authz_core:error] [pid 29546:tid 139835939415808] [client 74.7.241.17:48728] AH01630: client denied by server configuration: /home/pesema/public_html/
[Fri Sep 04 16:46:52.178198 2026] [proxy_fcgi:error] [pid 13658:tid 139835922630400] [client 138.197.66.96:33742] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 17:09:00.121730 2026] [:error] [pid 29546:tid 139835939415808] [client 93.123.109.164:3412] [client 93.123.109.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||pesema.com|F|2"] [data "Matched Data: `id found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var cp=process.mainmodule.require(child_process) var out try{out=cp.execsync(`id hostname pwd` {timeout:12000 maxbuffer:10485760 shell:/bin/sh}).tostring() }catch(e){out=((e.stdout&&e.stdout.tostring())||)+((e.stderr&&e.stderr.tostring())||)+n[exit +(e.status==null??:e.status)+] }throw object.assign(new error(next_redirect) {digest:next_redirect push/login?a=+encodeuricomp..."] [se [hostname "pesema.com"] [uri "/"] [unique_id "aptBfBrO99QeoYsWFCb2_QAAAFY"]
[Fri Sep 04 17:17:10.419164 2026] [:error] [pid 13660:tid 139835964593920] [client 43.165.198.5:46928] [client 43.165.198.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "aptDZpSy4RCq0wvMzGNbtQAAARM"]
[Fri Sep 04 18:25:38.139761 2026] [:error] [pid 29546:tid 139836082091776] [client 43.130.102.7:50132] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "aptTchrO99QeoYsWFCYKfwAAAEU"]
[Fri Sep 04 19:04:14.173792 2026] [:error] [pid 18975:tid 139835947808512] [client 119.91.20.139:46948] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "aptcfqnHBGkx3aytOkFbMgAAAVU"]
[Fri Sep 04 19:18:34.921587 2026] [proxy_fcgi:error] [pid 18975:tid 139836031735552] [client 143.110.128.49:52284] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 19:27:26.772400 2026] [proxy_fcgi:error] [pid 29546:tid 139836185245440] [client 14.225.208.110:59222] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 20:23:25.843708 2026] [proxy_fcgi:error] [pid 13659:tid 139836056913664] [client 134.122.25.0:34468] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 22:46:50.292338 2026] [:error] [pid 13659:tid 139836056913664] [client 43.160.240.216:60832] [client 43.160.240.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apuQqjmFQNnnYjfYvsWodwAAAIg"]
[Fri Sep 04 23:27:14.131467 2026] [authz_core:error] [pid 13660:tid 139836056913664] [client 74.7.227.160:41592] AH01630: client denied by server configuration: /home/pesema/public_html/, referer: https://domraider.br.com
[Fri Sep 04 23:30:27.521516 2026] [:error] [pid 13747:tid 139835956201216] [client 43.160.219.138:34088] [client 43.160.219.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apua4ybk0DNbiI2-ITYoBgAAANQ"]
[Fri Sep 04 23:39:29.752324 2026] [authz_core:error] [pid 29546:tid 139836176852736] [client 84.118.165.250:60977] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Sat Sep 05 00:28:06.164464 2026] [:error] [pid 29546:tid 139836048520960] [client 82.156.88.97:45670] [client 82.156.88.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apuoZhrO99QeoYsWFCZfAQAAAEk"]
[Sat Sep 05 00:28:15.765221 2026] [:error] [pid 18975:tid 139836168460032] [client 82.156.88.97:55044] [client 82.156.88.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apuob6nHBGkx3aytOkGmxwAAAUM"]
[Sat Sep 05 03:00:13.241450 2026] [:error] [pid 13481:tid 139836040128256] [client 43.157.50.58:53692] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apvMDSV_S12bQbR36npBVQAAAYo"]
[Sat Sep 05 03:13:26.812002 2026] [proxy_fcgi:error] [pid 27736:tid 140639190554368] [client 62.60.130.230:53509] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 04:05:02.555238 2026] [:error] [pid 27574:tid 140639291266816] [client 43.165.4.2:35008] [client 43.165.4.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apvbPjOzSOqeIAxIlCU1JwAAAIo"]
[Sat Sep 05 05:40:13.227160 2026] [:error] [pid 4033:tid 140639207339776] [client 129.28.84.30:47466] [client 129.28.84.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apvxjSJsPCTDynrok3DP3AAAAFQ"]
[Sat Sep 05 06:05:56.198789 2026] [authz_core:error] [pid 4033:tid 140639215732480] [client 74.7.227.160:50882] AH01630: client denied by server configuration: /home/pesema/public_html/, referer: http://www.taxies.biz
[Sat Sep 05 07:14:37.065552 2026] [:error] [pid 4033:tid 140639316444928] [client 170.106.84.136:38490] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apwHrSJsPCTDynrok3DoZQAAAEc"]
[Sat Sep 05 08:02:42.075196 2026] [:error] [pid 27736:tid 140639333230336] [client 150.109.230.210:41594] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apwS8s_aUN8B6E4YuZ0QuQAAAAU"]
[Sat Sep 05 08:32:42.175724 2026] [:error] [pid 4033:tid 140639282874112] [client 35.194.215.35:55262] [client 35.194.215.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "apwZ-iJsPCTDynrok3AEAgAAAEs"]
[Sat Sep 05 09:58:46.122324 2026] [:error] [pid 4033:tid 140639274481408] [client 191.101.61.252:22715] [client 191.101.61.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "apwuJiJsPCTDynrok3AjmQAAAEw"]
[Sat Sep 05 11:06:46.818390 2026] [:error] [pid 27736:tid 140639324837632] [client 162.14.114.97:43116] [client 162.14.114.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apw-Fs_aUN8B6E4YuZ0_LwAAAAY"]
[Sat Sep 05 11:18:33.179245 2026] [:error] [pid 4033:tid 140639308052224] [client 43.166.237.57:45888] [client 43.166.237.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apxA2SJsPCTDynrok3BFrgAAAEg"]
[Sat Sep 05 12:12:51.651512 2026] [:error] [pid 4033:tid 140639232517888] [client 170.106.187.106:39478] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apxNkyJsPCTDynrok3BN2wAAAFE"]
[Sat Sep 05 13:32:12.086721 2026] [proxy_fcgi:error] [pid 27736:tid 140639198947072] [client 136.144.33.72:32695] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 13:37:59.713553 2026] [authz_core:error] [pid 27579:tid 140639324837632] [client 178.63.12.183:33560] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Sat Sep 05 16:20:30.539956 2026] [:error] [pid 27574:tid 140639333230336] [client 162.14.109.170:33756] [client 162.14.109.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apyHnjOzSOqeIAxIlCWfmgAAAIU"]
[Sat Sep 05 16:24:30.846240 2026] [:error] [pid 17344:tid 140639282874112] [client 170.106.161.78:50252] [client 170.106.161.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apyIjqJTLCMR4yydRVQI4AAAAYs"]
[Sat Sep 05 16:50:48.503905 2026] [:error] [pid 4033:tid 140639299659520] [client 104.199.152.250:23824] [client 104.199.152.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "apyOuCJsPCTDynrok3BwoAAAAEk"]
[Sat Sep 05 17:20:04.898814 2026] [:error] [pid 27579:tid 140639224125184] [client 124.156.225.181:33086] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apyVlNW93Omf5VnCQ0OKbwAAANI"]
[Sat Sep 05 18:34:09.758082 2026] [:error] [pid 27574:tid 140639257696000] [client 45.139.104.153:58098] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "apym8TOzSOqeIAxIlCWz1QAAAI4"]
[Sat Sep 05 18:34:09.781112 2026] [:error] [pid 27586:tid 140639198947072] [client 45.139.104.153:58171] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.local"] [unique_id "apym8VhHXYrxhzjoNrNREAAAARU"]
[Sat Sep 05 18:34:09.796129 2026] [:error] [pid 27586:tid 140639324837632] [client 45.139.104.153:58273] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.development"] [unique_id "apym8VhHXYrxhzjoNrNREQAAAQY"]
[Sat Sep 05 18:34:09.839865 2026] [:error] [pid 27586:tid 140639299659520] [client 45.139.104.153:58492] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.production"] [unique_id "apym8VhHXYrxhzjoNrNREgAAAQk"]
[Sat Sep 05 18:34:09.861564 2026] [:error] [pid 27736:tid 140639375193856] [client 45.139.104.153:58833] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.staging"] [unique_id "apym8c_aUN8B6E4YuZ1y8QAAAAA"]
[Sat Sep 05 18:34:09.905357 2026] [:error] [pid 27574:tid 140639282874112] [client 45.139.104.153:59108] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.test"] [unique_id "apym8TOzSOqeIAxIlCWz2QAAAIs"]
[Sat Sep 05 18:34:09.929853 2026] [:error] [pid 2787:tid 140639291266816] [client 45.139.104.153:59286] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.backup"] [unique_id "apym8US1H4sbzEVvEJpHnAAAAUo"]
[Sat Sep 05 18:34:09.957902 2026] [:error] [pid 2787:tid 140639173768960] [client 45.139.104.153:59534] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.old"] [unique_id "apym8US1H4sbzEVvEJpHoAAAAVg"]
[Sat Sep 05 18:34:10.004138 2026] [:error] [pid 27586:tid 140639190554368] [client 45.139.104.153:59909] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.example"] [unique_id "apym8lhHXYrxhzjoNrNRFgAAARY"]
[Sat Sep 05 18:34:10.047245 2026] [:error] [pid 27574:tid 140639324837632] [client 45.139.104.153:60258] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.sample"] [unique_id "apym8jOzSOqeIAxIlCWz2wAAAIY"]
[Sat Sep 05 18:34:10.067154 2026] [:error] [pid 27586:tid 140639291266816] [client 45.139.104.153:60373] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.template"] [unique_id "apym8lhHXYrxhzjoNrNRFwAAAQo"]
[Sat Sep 05 18:34:10.096210 2026] [:error] [pid 27574:tid 140639215732480] [client 45.139.104.153:60515] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.dev"] [unique_id "apym8jOzSOqeIAxIlCWz3QAAAJM"]
[Sat Sep 05 18:34:10.125748 2026] [:error] [pid 17344:tid 140639232517888] [client 45.139.104.153:60722] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.prod"] [unique_id "apym8qJTLCMR4yydRVQfAAAAAZE"]
[Sat Sep 05 18:34:10.164421 2026] [:error] [pid 27574:tid 140639316444928] [client 45.139.104.153:60971] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.php"] [unique_id "apym8jOzSOqeIAxIlCWz4AAAAIc"]
[Sat Sep 05 18:34:10.192665 2026] [:error] [pid 27586:tid 140639324837632] [client 45.139.104.153:61158] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.bak"] [unique_id "apym8lhHXYrxhzjoNrNRHQAAAQY"]
[Sat Sep 05 18:34:10.227359 2026] [:error] [pid 27574:tid 140639224125184] [client 45.139.104.153:61483] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env~"] [unique_id "apym8jOzSOqeIAxIlCWz4QAAAJI"]
[Sat Sep 05 18:34:10.250812 2026] [:error] [pid 27579:tid 140639341623040] [client 45.139.104.153:61697] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.save"] [unique_id "apym8tW93Omf5VnCQ0OcFwAAAMQ"]
[Sat Sep 05 18:34:10.295982 2026] [:error] [pid 2787:tid 140639324837632] [client 45.139.104.153:62256] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.swp"] [unique_id "apym8kS1H4sbzEVvEJpHowAAAUY"]
[Sat Sep 05 18:34:10.328353 2026] [:error] [pid 27574:tid 140639198947072] [client 45.139.104.153:64056] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.swo"] [unique_id "apym8jOzSOqeIAxIlCWz5gAAAJU"]
[Sat Sep 05 18:34:10.362601 2026] [:error] [pid 27574:tid 140639190554368] [client 45.139.104.153:49245] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.zip"] [unique_id "apym8jOzSOqeIAxIlCWz6wAAAJY"]
[Sat Sep 05 18:34:10.496615 2026] [:error] [pid 27736:tid 140639266088704] [client 45.139.104.153:52727] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/vendor/.env"] [unique_id "apym8s_aUN8B6E4YuZ1y-QAAAA0"]
[Sat Sep 05 18:34:10.523306 2026] [:error] [pid 27586:tid 140639350015744] [client 45.139.104.153:53658] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/lib/.env"] [unique_id "apym8lhHXYrxhzjoNrNRIgAAAQM"]
[Sat Sep 05 18:34:10.567550 2026] [:error] [pid 4033:tid 140639257696000] [client 45.139.104.153:54440] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/lab/.env"] [unique_id "apym8iJsPCTDynrok3B6igAAAE4"]
[Sat Sep 05 18:34:10.594083 2026] [:error] [pid 27574:tid 140639182161664] [client 45.139.104.153:54926] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cronlab/.env"] [unique_id "apym8jOzSOqeIAxIlCWz8wAAAJc"]
[Sat Sep 05 18:34:10.638772 2026] [:error] [pid 17344:tid 140639308052224] [client 45.139.104.153:55140] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/cron/.env"] [unique_id "apym8qJTLCMR4yydRVQfBwAAAYg"]
[Sat Sep 05 18:34:10.664217 2026] [:error] [pid 2787:tid 140639341623040] [client 45.139.104.153:55349] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/core/.env"] [unique_id "apym8kS1H4sbzEVvEJpHpQAAAUQ"]
[Sat Sep 05 18:34:10.689724 2026] [:error] [pid 27574:tid 140639333230336] [client 45.139.104.153:55536] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/core/app/.env"] [unique_id "apym8jOzSOqeIAxIlCWz9QAAAIU"]
[Sat Sep 05 18:34:10.722700 2026] [:error] [pid 4033:tid 140639358408448] [client 45.139.104.153:55655] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/database/.env"] [unique_id "apym8iJsPCTDynrok3B6jQAAAEI"]
[Sat Sep 05 18:34:10.750396 2026] [:error] [pid 27736:tid 140639358408448] [client 45.139.104.153:55779] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/config/.env"] [unique_id "apym8s_aUN8B6E4YuZ1y_gAAAAI"]
[Sat Sep 05 18:34:10.784083 2026] [:error] [pid 27574:tid 140639291266816] [client 45.139.104.153:56144] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/assets/.env"] [unique_id "apym8jOzSOqeIAxIlCWz9gAAAIo"]
[Sat Sep 05 18:34:10.810434 2026] [:error] [pid 27579:tid 140639324837632] [client 45.139.104.153:56376] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/app/.env"] [unique_id "apym8tW93Omf5VnCQ0OcIQAAAMY"]
[Sat Sep 05 18:34:10.838024 2026] [:error] [pid 27574:tid 140639316444928] [client 45.139.104.153:56644] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/apps/.env"] [unique_id "apym8jOzSOqeIAxIlCWz-AAAAIc"]
[Sat Sep 05 18:34:10.861751 2026] [:error] [pid 27579:tid 140639224125184] [client 45.139.104.153:56750] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/uploads/.env"] [unique_id "apym8tW93Omf5VnCQ0OcIwAAANI"]
[Sat Sep 05 18:34:10.891619 2026] [:error] [pid 27579:tid 140639333230336] [client 45.139.104.153:56964] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/api/.env"] [unique_id "apym8tW93Omf5VnCQ0OcJAAAAMU"]
[Sat Sep 05 18:34:10.927448 2026] [:error] [pid 4033:tid 140639316444928] [client 45.139.104.153:57255] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/site/.env"] [unique_id "apym8iJsPCTDynrok3B6kAAAAEc"]
[Sat Sep 05 18:34:10.951350 2026] [:error] [pid 27574:tid 140639350015744] [client 45.139.104.153:57347] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sites/.env"] [unique_id "apym8jOzSOqeIAxIlCWz-wAAAIM"]
[Sat Sep 05 18:34:10.968282 2026] [:error] [pid 17344:tid 140639249303296] [client 45.139.104.153:57451] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/admin/.env"] [unique_id "apym8qJTLCMR4yydRVQfDgAAAY8"]
[Sat Sep 05 18:34:11.003017 2026] [:error] [pid 27579:tid 140639316444928] [client 45.139.104.153:57653] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/web/.env"] [unique_id "apym89W93Omf5VnCQ0OcKQAAAMc"]
[Sat Sep 05 18:34:11.031035 2026] [:error] [pid 4033:tid 140639249303296] [client 45.139.104.153:57852] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/public/.env"] [unique_id "apym8yJsPCTDynrok3B6kgAAAE8"]
[Sat Sep 05 18:34:11.066157 2026] [:error] [pid 2787:tid 140639257696000] [client 45.139.104.153:58053] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/backend/.env"] [unique_id "apym80S1H4sbzEVvEJpHrQAAAU4"]
[Sat Sep 05 18:34:11.098922 2026] [:error] [pid 27579:tid 140639207339776] [client 45.139.104.153:58393] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/main/.env"] [unique_id "apym89W93Omf5VnCQ0OcKwAAANQ"]
[Sat Sep 05 18:34:11.127971 2026] [:error] [pid 27579:tid 140639240910592] [client 45.139.104.153:58754] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/docs/.env"] [unique_id "apym89W93Omf5VnCQ0OcLAAAANA"]
[Sat Sep 05 18:34:11.157991 2026] [:error] [pid 27736:tid 140639291266816] [client 45.139.104.153:58901] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/client/.env"] [unique_id "apym88_aUN8B6E4YuZ1zAgAAAAo"]
[Sat Sep 05 18:34:11.188623 2026] [:error] [pid 27574:tid 140639215732480] [client 45.139.104.153:59031] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/blog/.env"] [unique_id "apym8zOzSOqeIAxIlCW0AgAAAJM"]
[Sat Sep 05 18:34:11.222018 2026] [:error] [pid 2787:tid 140639190554368] [client 45.139.104.153:59417] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/storage/.env"] [unique_id "apym80S1H4sbzEVvEJpHsAAAAVY"]
[Sat Sep 05 18:34:11.254891 2026] [:error] [pid 4033:tid 140639308052224] [client 45.139.104.153:59604] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/server/.env"] [unique_id "apym8yJsPCTDynrok3B6lQAAAEg"]
[Sat Sep 05 18:34:11.285403 2026] [:error] [pid 17344:tid 140639240910592] [client 45.139.104.153:59823] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/src/.env"] [unique_id "apym86JTLCMR4yydRVQfEwAAAZA"]
[Sat Sep 05 18:34:11.314354 2026] [:error] [pid 4033:tid 140639257696000] [client 45.139.104.153:60028] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/dist/.env"] [unique_id "apym8yJsPCTDynrok3B6lgAAAE4"]
[Sat Sep 05 18:34:11.345414 2026] [:error] [pid 27579:tid 140639366801152] [client 45.139.104.153:60347] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/laravel/.env"] [unique_id "apym89W93Omf5VnCQ0OcLwAAAME"]
[Sat Sep 05 18:34:11.377997 2026] [:error] [pid 27574:tid 140639366801152] [client 45.139.104.153:60444] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/.env"] [unique_id "apym8zOzSOqeIAxIlCW0CAAAAIE"]
[Sat Sep 05 18:34:11.408850 2026] [:error] [pid 27574:tid 140639232517888] [client 45.139.104.153:60771] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/.aws/.env"] [unique_id "apym8zOzSOqeIAxIlCW0CgAAAJE"]
[Sat Sep 05 18:34:11.441780 2026] [:error] [pid 27574:tid 140639215732480] [client 45.139.104.153:61014] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/.aws/credentials/.env"] [unique_id "apym8zOzSOqeIAxIlCW0DgAAAJM"]
[Sat Sep 05 18:34:11.468824 2026] [:error] [pid 27579:tid 140639333230336] [client 45.139.104.153:61169] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/.aws/config/.env"] [unique_id "apym89W93Omf5VnCQ0OcMAAAAMU"]
[Sat Sep 05 18:34:11.482480 2026] [:error] [pid 27579:tid 140639375193856] [client 45.139.104.153:61285] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/miniconda/envs/.env"] [unique_id "apym89W93Omf5VnCQ0OcMgAAAMA"]
[Sat Sep 05 18:34:11.497883 2026] [:error] [pid 27586:tid 140639324837632] [client 45.139.104.153:61434] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/miniconda/bin/.env"] [unique_id "apym81hHXYrxhzjoNrNRNQAAAQY"]
[Sat Sep 05 18:34:11.515784 2026] [:error] [pid 17344:tid 140639207339776] [client 45.139.104.153:61587] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/miniconda/bin/aws/.env"] [unique_id "apym86JTLCMR4yydRVQfFQAAAZQ"]
[Sat Sep 05 18:34:11.531824 2026] [:error] [pid 27586:tid 140639366801152] [client 45.139.104.153:61719] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/miniconda/bin/aws/bin/.env"] [unique_id "apym81hHXYrxhzjoNrNRNgAAAQE"]
[Sat Sep 05 18:34:11.553246 2026] [:error] [pid 27574:tid 140639299659520] [client 45.139.104.153:61938] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/.miniconda/envs/.env"] [unique_id "apym8zOzSOqeIAxIlCW0EAAAAIk"]
[Sat Sep 05 18:34:11.578851 2026] [:error] [pid 27574:tid 140639308052224] [client 45.139.104.153:63101] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/.miniconda/bin/.env"] [unique_id "apym8zOzSOqeIAxIlCW0EwAAAIg"]
[Sat Sep 05 18:34:11.616433 2026] [:error] [pid 27574:tid 140639173768960] [client 45.139.104.153:65099] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/aws/.env"] [unique_id "apym8zOzSOqeIAxIlCW0FQAAAJg"]
[Sat Sep 05 18:34:11.664435 2026] [:error] [pid 4033:tid 140639274481408] [client 45.139.104.153:49760] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/aws/bin/.env"] [unique_id "apym8yJsPCTDynrok3B6mwAAAEw"]
[Sat Sep 05 18:34:11.689559 2026] [:error] [pid 27574:tid 140639324837632] [client 45.139.104.153:50751] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/aws/config/.env"] [unique_id "apym8zOzSOqeIAxIlCW0FwAAAIY"]
[Sat Sep 05 18:34:11.736377 2026] [:error] [pid 27736:tid 140639224125184] [client 45.139.104.153:51218] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/env/.env"] [unique_id "apym88_aUN8B6E4YuZ1zBwAAABI"]
[Sat Sep 05 18:34:11.767157 2026] [:error] [pid 27586:tid 140639182161664] [client 45.139.104.153:51788] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/bin/.env"] [unique_id "apym81hHXYrxhzjoNrNROQAAARc"]
[Sat Sep 05 18:34:11.798700 2026] [:error] [pid 27586:tid 140639257696000] [client 45.139.104.153:52730] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/envs/.env"] [unique_id "apym81hHXYrxhzjoNrNROwAAAQ4"]
[Sat Sep 05 18:34:11.847582 2026] [:error] [pid 27574:tid 140639350015744] [client 45.139.104.153:53618] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/.local/.env"] [unique_id "apym8zOzSOqeIAxIlCW0HwAAAIM"]
[Sat Sep 05 18:34:11.872379 2026] [:error] [pid 2787:tid 140639291266816] [client 45.139.104.153:53952] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/.local/bin/.env"] [unique_id "apym80S1H4sbzEVvEJpHtQAAAUo"]
[Sat Sep 05 18:34:11.886383 2026] [:error] [pid 27574:tid 140639324837632] [client 45.139.104.153:54389] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/.conda/.env"] [unique_id "apym8zOzSOqeIAxIlCW0IwAAAIY"]
[Sat Sep 05 18:34:11.906184 2026] [:error] [pid 27574:tid 140639215732480] [client 45.139.104.153:54508] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/.cache/.env"] [unique_id "apym8zOzSOqeIAxIlCW0JQAAAJM"]
[Sat Sep 05 18:34:11.930618 2026] [:error] [pid 27574:tid 140639291266816] [client 45.139.104.153:54714] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/.config/.env"] [unique_id "apym8zOzSOqeIAxIlCW0JgAAAIo"]
[Sat Sep 05 18:34:11.952610 2026] [:error] [pid 27586:tid 140639308052224] [client 45.139.104.153:54991] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/home/ec2-user/.ssh/.env"] [unique_id "apym81hHXYrxhzjoNrNRPwAAAQg"]
[Sat Sep 05 18:34:11.968569 2026] [:error] [pid 27586:tid 140639341623040] [client 45.139.104.153:55043] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sendgrid/.env"] [unique_id "apym81hHXYrxhzjoNrNRQQAAAQQ"]
[Sat Sep 05 18:34:11.985820 2026] [:error] [pid 4033:tid 140639249303296] [client 45.139.104.153:55174] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sendgrid/config/.env"] [unique_id "apym8yJsPCTDynrok3B6nwAAAE8"]
[Sat Sep 05 18:34:12.013903 2026] [:error] [pid 27586:tid 140639266088704] [client 45.139.104.153:55337] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sendgrid/credentials/.env"] [unique_id "apym9FhHXYrxhzjoNrNRRAAAAQ0"]
[Sat Sep 05 18:34:12.049316 2026] [:error] [pid 27574:tid 140639240910592] [client 45.139.104.153:55471] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sendgrid/api/.env"] [unique_id "apym9DOzSOqeIAxIlCW0KgAAAJA"]
[Sat Sep 05 18:34:12.076906 2026] [:error] [pid 4033:tid 140639257696000] [client 45.139.104.153:55592] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sendgrid/app/.env"] [unique_id "apym9CJsPCTDynrok3B6owAAAE4"]
[Sat Sep 05 18:34:12.090182 2026] [:error] [pid 4033:tid 140639366801152] [client 45.139.104.153:55653] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/sendgrid/backend/.env"] [unique_id "apym9CJsPCTDynrok3B6pAAAAEE"]
[Sat Sep 05 18:34:12.116372 2026] [:error] [pid 27574:tid 140639198947072] [client 45.139.104.153:55822] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/twilio/.env"] [unique_id "apym9DOzSOqeIAxIlCW0LQAAAJU"]
[Sat Sep 05 18:34:12.137994 2026] [:error] [pid 27574:tid 140639324837632] [client 45.139.104.153:55964] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/twilio/config/.env"] [unique_id "apym9DOzSOqeIAxIlCW0LwAAAIY"]
[Sat Sep 05 18:34:12.154657 2026] [:error] [pid 27574:tid 140639291266816] [client 45.139.104.153:56180] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/twilio/credentials/.env"] [unique_id "apym9DOzSOqeIAxIlCW0MgAAAIo"]
[Sat Sep 05 18:34:12.191512 2026] [:error] [pid 4033:tid 140639207339776] [client 45.139.104.153:56312] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/twilio/api/.env"] [unique_id "apym9CJsPCTDynrok3B6pgAAAFQ"]
[Sat Sep 05 18:34:12.234867 2026] [:error] [pid 4033:tid 140639198947072] [client 45.139.104.153:56694] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/twilio/app/.env"] [unique_id "apym9CJsPCTDynrok3B6qAAAAFU"]
[Sat Sep 05 18:34:12.265295 2026] [:error] [pid 27574:tid 140639240910592] [client 45.139.104.153:56903] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/twilio/backend/.env"] [unique_id "apym9DOzSOqeIAxIlCW0NQAAAJA"]
[Sat Sep 05 18:34:12.278691 2026] [:error] [pid 27736:tid 140639198947072] [client 45.139.104.153:56954] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/twilio/env/.env"] [unique_id "apym9M_aUN8B6E4YuZ1zDAAAABU"]
[Sat Sep 05 18:34:12.296723 2026] [:error] [pid 27736:tid 140639350015744] [client 45.139.104.153:57090] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/twilio/bin/.env"] [unique_id "apym9M_aUN8B6E4YuZ1zDgAAAAM"]
[Sat Sep 05 18:34:12.309520 2026] [:error] [pid 27574:tid 140639173768960] [client 45.139.104.153:57162] [client 45.139.104.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/twilio/.local/.env"] [unique_id "apym9DOzSOqeIAxIlCW0OAAAAJg"]
[Sat Sep 05 19:05:16.217055 2026] [:error] [pid 27574:tid 140639249303296] [client 34.65.99.225:39596] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wp-config.php.swp"] [unique_id "apyuPDOzSOqeIAxIlCW6zgAAAI8"]
[Sat Sep 05 19:05:16.218211 2026] [:error] [pid 2787:tid 140639299659520] [client 34.65.99.225:39618] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.local"] [unique_id "apyuPES1H4sbzEVvEJpJoAAAAUk"]
[Sat Sep 05 19:05:16.218470 2026] [:error] [pid 27574:tid 140639215732480] [client 34.65.99.225:39580] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.example"] [unique_id "apyuPDOzSOqeIAxIlCW60AAAAJM"]
[Sat Sep 05 19:05:16.219057 2026] [:error] [pid 2787:tid 140639282874112] [client 34.65.99.225:39678] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wp-config.php~"] [unique_id "apyuPES1H4sbzEVvEJpJoQAAAUs"]
[Sat Sep 05 19:05:16.219752 2026] [:error] [pid 2787:tid 140639257696000] [client 34.65.99.225:39604] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.prod"] [unique_id "apyuPES1H4sbzEVvEJpJogAAAU4"]
[Sat Sep 05 19:05:16.220502 2026] [:error] [pid 27736:tid 140639249303296] [client 34.65.99.225:39640] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.dev"] [unique_id "apyuPM_aUN8B6E4YuZ10rAAAAA8"]
[Sat Sep 05 19:05:16.221666 2026] [:error] [pid 27736:tid 140639299659520] [client 34.65.99.225:39570] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pesema.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pesema.com"] [uri "/storage/logs/laravel.log"] [unique_id "apyuPM_aUN8B6E4YuZ10qwAAAAk"]
[Sat Sep 05 19:05:16.223026 2026] [:error] [pid 2787:tid 140639215732480] [client 34.65.99.225:39540] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.old"] [unique_id "apyuPES1H4sbzEVvEJpJowAAAVM"]
[Sat Sep 05 19:05:16.224095 2026] [:error] [pid 27736:tid 140639173768960] [client 34.65.99.225:39590] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.backup"] [unique_id "apyuPM_aUN8B6E4YuZ10rQAAABg"]
[Sat Sep 05 19:05:16.225891 2026] [:error] [pid 27736:tid 140639266088704] [client 34.65.99.225:39662] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.production"] [unique_id "apyuPM_aUN8B6E4YuZ10rgAAAA0"]
[Sat Sep 05 19:05:16.225985 2026] [:error] [pid 2787:tid 140639308052224] [client 34.65.99.225:39632] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wp-config.php.bak"] [unique_id "apyuPES1H4sbzEVvEJpJpQAAAUg"]
[Sat Sep 05 19:05:16.226142 2026] [:error] [pid 17344:tid 140639207339776] [client 34.65.99.225:39686] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.save"] [unique_id "apyuPKJTLCMR4yydRVQg1wAAAZQ"]
[Sat Sep 05 19:05:16.226854 2026] [:error] [pid 17344:tid 140639274481408] [client 34.65.99.225:39672] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.bak"] [unique_id "apyuPKJTLCMR4yydRVQg2QAAAYw"]
[Sat Sep 05 19:05:16.230263 2026] [:error] [pid 2787:tid 140639333230336] [client 34.65.99.225:39574] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "apyuPES1H4sbzEVvEJpJpgAAAUU"]
[Sat Sep 05 19:05:22.061550 2026] [:error] [pid 27586:tid 140639207339776] [client 34.65.99.225:45522] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.ENV"] [unique_id "apyuQlhHXYrxhzjoNrNVegAAARQ"]
[Sat Sep 05 19:05:22.061808 2026] [:error] [pid 4033:tid 140639257696000] [client 34.65.99.225:45512] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env;.png"] [unique_id "apyuQiJsPCTDynrok3B8wwAAAE4"]
[Sat Sep 05 19:05:22.066904 2026] [:error] [pid 2787:tid 140639240910592] [client 34.65.99.225:45530] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env/"] [unique_id "apyuQkS1H4sbzEVvEJpJpwAAAVA"]
[Sat Sep 05 19:05:22.067235 2026] [:error] [pid 2787:tid 140639207339776] [client 34.65.99.225:45534] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "apyuQkS1H4sbzEVvEJpJqAAAAVQ"]
[Sat Sep 05 19:05:22.068131 2026] [:error] [pid 27574:tid 140639198947072] [client 34.65.99.225:45548] [client 34.65.99.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env."] [unique_id "apyuQjOzSOqeIAxIlCW62AAAAJU"]
[Sat Sep 05 20:27:49.045039 2026] [proxy_fcgi:error] [pid 27579:tid 140639232517888] [client 4.204.224.164:41370] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:49.252553 2026] [proxy_fcgi:error] [pid 27579:tid 140639366801152] [client 4.204.224.164:50602] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:49.457899 2026] [:error] [pid 27586:tid 140639358408448] [client 4.204.224.164:50569] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(^|/)(\\\\.env($|[/?])|\\\\.git/|aw\\\\.php$|adminfuns\\\\.php$|xmrlpc\\\\.php$|unzipper\\\\.php$|alfa\\\\.php$|alfanew\\\\.php$)" at REQUEST_URI. [file "/usr/local/apache/conf.d/zzz-security-hardening.conf"] [line "26"] [id "110001"] [msg "CWP-Hardening: Scanner/webshell probe blocked"] [hostname "pesema.com"] [uri "/adminfuns.php"] [unique_id "apzBlVhHXYrxhzjoNrNeBAAAAQI"]
[Sat Sep 05 20:27:49.658098 2026] [proxy_fcgi:error] [pid 27574:tid 140639173768960] [client 4.204.224.164:41413] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:49.863810 2026] [proxy_fcgi:error] [pid 27574:tid 140639274481408] [client 4.204.224.164:41408] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:50.072583 2026] [proxy_fcgi:error] [pid 2787:tid 140639282874112] [client 4.204.224.164:41427] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:50.279303 2026] [proxy_fcgi:error] [pid 27586:tid 140639224125184] [client 4.204.224.164:41351] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:50.485112 2026] [proxy_fcgi:error] [pid 27574:tid 140639308052224] [client 4.204.224.164:41389] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:50.691765 2026] [proxy_fcgi:error] [pid 27574:tid 140639282874112] [client 4.204.224.164:41407] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:50.894186 2026] [proxy_fcgi:error] [pid 27736:tid 140639249303296] [client 4.204.224.164:50589] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:51.099416 2026] [proxy_fcgi:error] [pid 8788:tid 140639358408448] [client 4.204.224.164:41385] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:51.307259 2026] [proxy_fcgi:error] [pid 27736:tid 140639316444928] [client 4.204.224.164:41314] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:51.514727 2026] [proxy_fcgi:error] [pid 27736:tid 140639350015744] [client 4.204.224.164:62106] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:51.711269 2026] [:error] [pid 27574:tid 140639358408448] [client 4.204.224.164:40664] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(^|/)(\\\\.env($|[/?])|\\\\.git/|aw\\\\.php$|adminfuns\\\\.php$|xmrlpc\\\\.php$|unzipper\\\\.php$|alfa\\\\.php$|alfanew\\\\.php$)" at REQUEST_URI. [file "/usr/local/apache/conf.d/zzz-security-hardening.conf"] [line "26"] [id "110001"] [msg "CWP-Hardening: Scanner/webshell probe blocked"] [hostname "pesema.com"] [uri "/alfa.php"] [unique_id "apzBlzOzSOqeIAxIlCXKhgAAAII"]
[Sat Sep 05 20:27:52.129364 2026] [proxy_fcgi:error] [pid 27586:tid 140639257696000] [client 4.204.224.164:50615] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:52.342079 2026] [proxy_fcgi:error] [pid 8788:tid 140639257696000] [client 4.204.224.164:62112] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:52.550014 2026] [proxy_fcgi:error] [pid 27574:tid 140639299659520] [client 4.204.224.164:41344] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:52.756041 2026] [proxy_fcgi:error] [pid 8788:tid 140639299659520] [client 4.204.224.164:41404] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:52.963049 2026] [proxy_fcgi:error] [pid 27586:tid 140639173768960] [client 4.204.224.164:41346] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:53.167804 2026] [proxy_fcgi:error] [pid 27586:tid 140639299659520] [client 4.204.224.164:41373] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:53.372493 2026] [proxy_fcgi:error] [pid 8788:tid 140639266088704] [client 4.204.224.164:40548] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:53.576644 2026] [proxy_fcgi:error] [pid 27736:tid 140639198947072] [client 4.204.224.164:62139] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:53.785621 2026] [proxy_fcgi:error] [pid 27736:tid 140639375193856] [client 4.204.224.164:62105] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:53.993770 2026] [proxy_fcgi:error] [pid 17344:tid 140639333230336] [client 4.204.224.164:50573] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:54.200081 2026] [proxy_fcgi:error] [pid 27574:tid 140639215732480] [client 4.204.224.164:41429] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:54.408201 2026] [proxy_fcgi:error] [pid 27736:tid 140639291266816] [client 4.204.224.164:41423] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 20:27:54.408381 2026] [:error] [pid 27736:tid 140639291266816] [client 4.204.224.164:41423] [client 4.204.224.164] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "pesema.com"] [uri "/edit-tags.php"] [unique_id "apzBms_aUN8B6E4YuZ2DpAAAAAo"]
[Sat Sep 05 20:27:54.612071 2026] [:error] [pid 2787:tid 140639299659520] [client 4.204.224.164:41357] [client 4.204.224.164] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "pesema.com"] [uri "/nauik.php"] [unique_id "apzBmkS1H4sbzEVvEJpPCwAAAUk"]
[Sat Sep 05 21:20:59.158946 2026] [:error] [pid 8788:tid 140639358408448] [client 43.166.244.66:41724] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apzOCxBb3G036ND3Li8_gQAAAcI"]
[Sat Sep 05 21:36:41.661844 2026] [:error] [pid 27586:tid 140639257696000] [client 49.233.45.47:58482] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "apzRuVhHXYrxhzjoNrNjowAAAQ4"]
[Sat Sep 05 22:24:39.569016 2026] [:error] [pid 27574:tid 140639375193856] [client 43.164.192.151:46774] [client 43.164.192.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "apzc9zOzSOqeIAxIlCXe2QAAAIA"]
[Sat Sep 05 22:48:40.972487 2026] [:error] [pid 27574:tid 140639274481408] [client 94.154.43.180:51738] [client 94.154.43.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "apzimDOzSOqeIAxIlCXiOwAAAIw"]
[Sun Sep 06 02:09:04.077097 2026] [:error] [pid 27586:tid 140639266088704] [client 43.165.195.234:46504] [client 43.165.195.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "ap0RkFhHXYrxhzjoNrOB4QAAAQ0"]
[Sun Sep 06 02:19:40.157077 2026] [:error] [pid 27574:tid 140639207339776] [client 154.54.100.179:45130] [client 154.54.100.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "ap0UDDOzSOqeIAxIlCUB4QAAAJQ"]
[Sun Sep 06 02:43:42.566705 2026] [authz_core:error] [pid 8788:tid 140639257696000] [client 102.205.85.166:64699] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Sun Sep 06 02:51:19.935842 2026] [:error] [pid 27736:tid 140639324837632] [client 1.14.110.85:51210] [client 1.14.110.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "ap0bd8_aUN8B6E4YuZ2_gwAAAAY"]
[Sun Sep 06 02:59:48.990098 2026] [:error] [pid 4033:tid 140639249303296] [client 43.160.219.138:55700] [client 43.160.219.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "ap0ddCJsPCTDynrok3CZTgAAAE8"]
[Sun Sep 06 06:28:43.277576 2026] [:error] [pid 23146:tid 140134322210560] [client 101.32.208.70:58248] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "ap1Oa42k0yzxcd_3Y4sIiQAAAFQ"]
[Sun Sep 06 07:18:08.291515 2026] [:error] [pid 23146:tid 140134397744896] [client 49.51.243.156:51676] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "ap1aAI2k0yzxcd_3Y4sbagAAAEs"]
[Sun Sep 06 08:03:46.538854 2026] [:error] [pid 9496:tid 140134380959488] [client 1.14.110.85:40092] [client 1.14.110.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "ap1kslp2h8ZYqaIyuoenQAAAAI0"]
[Sun Sep 06 09:14:30.686338 2026] [proxy_fcgi:error] [pid 9497:tid 140134313817856] [client 98.159.37.234:26915] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:27:57.668060 2026] [:error] [pid 9583:tid 140134439708416] [client 35.238.146.122:59384] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "ap14bfhF6tTT-2YP-moQoQAAAQY"]
[Sun Sep 06 09:27:58.975600 2026] [:error] [pid 9497:tid 140134380959488] [client 35.238.146.122:59406] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env"] [unique_id "ap14bjN1K9zF5GGDr7YIyAAAAM0"]
[Sun Sep 06 09:27:59.590259 2026] [:error] [pid 23146:tid 140134313817856] [client 35.238.146.122:59414] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.local"] [unique_id "ap14b42k0yzxcd_3Y4tH3gAAAFU"]
[Sun Sep 06 09:28:00.205338 2026] [:error] [pid 9583:tid 140134313817856] [client 35.238.146.122:59422] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.production"] [unique_id "ap14cPhF6tTT-2YP-moQqQAAARU"]
[Sun Sep 06 09:28:00.836607 2026] [:error] [pid 9498:tid 140134305425152] [client 35.238.146.122:59426] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.staging"] [unique_id "ap14cE85o6C7WMFTapP1TwAAABY"]
[Sun Sep 06 09:28:01.450210 2026] [:error] [pid 9498:tid 140134330603264] [client 35.238.146.122:59442] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.development"] [unique_id "ap14cU85o6C7WMFTapP1UAAAABM"]
[Sun Sep 06 09:28:02.193545 2026] [:error] [pid 9583:tid 140134439708416] [client 35.238.146.122:59446] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.test"] [unique_id "ap14cvhF6tTT-2YP-moQrwAAAQY"]
[Sun Sep 06 09:28:02.714777 2026] [:error] [pid 23146:tid 140134448101120] [client 35.238.146.122:59452] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.remote"] [unique_id "ap14co2k0yzxcd_3Y4tH4QAAAEU"]
[Sun Sep 06 09:28:03.269420 2026] [:error] [pid 9583:tid 140134322210560] [client 35.238.146.122:59468] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.bak"] [unique_id "ap14c_hF6tTT-2YP-moQsgAAARQ"]
[Sun Sep 06 09:28:03.819092 2026] [:error] [pid 9583:tid 140134448101120] [client 35.238.146.122:59474] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup"] [unique_id "ap14c_hF6tTT-2YP-moQtwAAAQU"]
[Sun Sep 06 09:28:04.346026 2026] [:error] [pid 9496:tid 140134414530304] [client 35.238.146.122:59488] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.save"] [unique_id "ap14dFp2h8ZYqaIyuoe2yAAAAIk"]
[Sun Sep 06 09:28:04.883908 2026] [:error] [pid 9583:tid 140134439708416] [client 35.238.146.122:59496] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.old"] [unique_id "ap14dPhF6tTT-2YP-moQugAAAQY"]
[Sun Sep 06 09:28:05.519058 2026] [:error] [pid 9498:tid 140134554949376] [client 35.238.146.122:35114] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.sample"] [unique_id "ap14dU85o6C7WMFTapP1VwAAAAE"]
[Sun Sep 06 09:28:06.068155 2026] [:error] [pid 9498:tid 140134448101120] [client 35.238.146.122:35130] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.example"] [unique_id "ap14dk85o6C7WMFTapP1WQAAAAU"]
[Sun Sep 06 09:28:06.687194 2026] [:error] [pid 23146:tid 140134546556672] [client 35.238.146.122:35134] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dev"] [unique_id "ap14do2k0yzxcd_3Y4tH5QAAAEI"]
[Sun Sep 06 09:28:07.285667 2026] [:error] [pid 23146:tid 140134355781376] [client 35.238.146.122:35138] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.prod"] [unique_id "ap14d42k0yzxcd_3Y4tH6AAAAFA"]
[Sun Sep 06 09:28:07.988304 2026] [:error] [pid 9583:tid 140134297032448] [client 35.238.146.122:35140] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.stage"] [unique_id "ap14d_hF6tTT-2YP-moQvwAAARc"]
[Sun Sep 06 09:28:08.693443 2026] [:error] [pid 9496:tid 140134406137600] [client 35.238.146.122:35146] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.ci"] [unique_id "ap14eFp2h8ZYqaIyuoe2yQAAAIo"]
[Sun Sep 06 09:28:09.357329 2026] [:error] [pid 9583:tid 140134364174080] [client 35.238.146.122:35148] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.docker"] [unique_id "ap14efhF6tTT-2YP-moQwAAAAQ8"]
[Sun Sep 06 09:28:09.934488 2026] [:error] [pid 9497:tid 140134529771264] [client 35.238.146.122:35156] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.live"] [unique_id "ap14eTN1K9zF5GGDr7YI0gAAAMQ"]
[Sun Sep 06 09:28:10.559809 2026] [:error] [pid 9497:tid 140134422923008] [client 35.238.146.122:35158] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.preprod"] [unique_id "ap14ejN1K9zF5GGDr7YI1QAAAMg"]
[Sun Sep 06 09:28:11.153008 2026] [:error] [pid 23146:tid 140134389352192] [client 35.238.146.122:35174] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.uat"] [unique_id "ap14e42k0yzxcd_3Y4tH6gAAAEw"]
[Sun Sep 06 09:28:11.685768 2026] [:error] [pid 9497:tid 140134297032448] [client 35.238.146.122:35190] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dist"] [unique_id "ap14ezN1K9zF5GGDr7YI1gAAANc"]
[Sun Sep 06 09:28:12.309499 2026] [:error] [pid 9583:tid 140134288639744] [client 35.238.146.122:35200] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.swp"] [unique_id "ap14fPhF6tTT-2YP-moQxgAAARg"]
[Sun Sep 06 09:28:12.905129 2026] [:error] [pid 9497:tid 140134563342080] [client 35.238.146.122:35208] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env~"] [unique_id "ap14fDN1K9zF5GGDr7YI2AAAAMA"]
[Sun Sep 06 09:28:13.515108 2026] [:error] [pid 9497:tid 140134372566784] [client 35.238.146.122:35216] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env1"] [unique_id "ap14fTN1K9zF5GGDr7YI2gAAAM4"]
[Sun Sep 06 09:28:14.066916 2026] [:error] [pid 23146:tid 140134406137600] [client 35.238.146.122:35218] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env2"] [unique_id "ap14fo2k0yzxcd_3Y4tH7AAAAEo"]
[Sun Sep 06 09:28:14.636060 2026] [:error] [pid 9583:tid 140134406137600] [client 35.238.146.122:35230] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env_copy"] [unique_id "ap14fvhF6tTT-2YP-moQzQAAAQo"]
[Sun Sep 06 09:28:15.156502 2026] [:error] [pid 9497:tid 140134529771264] [client 35.238.146.122:60752] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.txt"] [unique_id "ap14fzN1K9zF5GGDr7YI2wAAAMQ"]
[Sun Sep 06 09:28:15.773857 2026] [:error] [pid 9498:tid 140134406137600] [client 35.238.146.122:60758] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.json"] [unique_id "ap14f085o6C7WMFTapP1XwAAAAo"]
[Sun Sep 06 09:28:16.300209 2026] [:error] [pid 9583:tid 140134422923008] [client 35.238.146.122:60772] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.yaml"] [unique_id "ap14gPhF6tTT-2YP-moQ0QAAAQg"]
[Sun Sep 06 09:28:16.864315 2026] [:error] [pid 9497:tid 140134431315712] [client 35.238.146.122:60788] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.yml"] [unique_id "ap14gDN1K9zF5GGDr7YI3AAAAMc"]
[Sun Sep 06 09:28:17.410098 2026] [:error] [pid 23146:tid 140134330603264] [client 35.238.146.122:60802] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/.env"] [unique_id "ap14gY2k0yzxcd_3Y4tH7wAAAFM"]
[Sun Sep 06 09:28:17.988123 2026] [:error] [pid 9498:tid 140134538163968] [client 35.238.146.122:60808] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/apps/.env"] [unique_id "ap14gU85o6C7WMFTapP1YQAAAAM"]
[Sun Sep 06 09:28:18.575097 2026] [:error] [pid 23146:tid 140134305425152] [client 35.238.146.122:60810] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/.env"] [unique_id "ap14go2k0yzxcd_3Y4tH8QAAAFY"]
[Sun Sep 06 09:28:19.187389 2026] [:error] [pid 23146:tid 140134431315712] [client 35.238.146.122:60812] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/web/.env"] [unique_id "ap14g42k0yzxcd_3Y4tH8wAAAEc"]
[Sun Sep 06 09:28:19.778732 2026] [:error] [pid 23146:tid 140134338995968] [client 35.238.146.122:60822] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/site/.env"] [unique_id "ap14g42k0yzxcd_3Y4tH9gAAAFI"]
[Sun Sep 06 09:28:20.394127 2026] [:error] [pid 9498:tid 140134397744896] [client 35.238.146.122:60832] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/public/.env"] [unique_id "ap14hE85o6C7WMFTapP1YwAAAAs"]
[Sun Sep 06 09:28:20.953870 2026] [:error] [pid 9583:tid 140134538163968] [client 35.238.146.122:60836] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin/.env"] [unique_id "ap14hPhF6tTT-2YP-moQ1wAAAQM"]
[Sun Sep 06 09:28:21.598393 2026] [:error] [pid 23146:tid 140134297032448] [client 35.238.146.122:60846] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend/.env"] [unique_id "ap14hY2k0yzxcd_3Y4tH9wAAAFc"]
[Sun Sep 06 09:28:22.225269 2026] [:error] [pid 9497:tid 140134297032448] [client 35.238.146.122:60850] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/server/.env"] [unique_id "ap14hjN1K9zF5GGDr7YI4AAAANc"]
[Sun Sep 06 09:28:22.786775 2026] [:error] [pid 23146:tid 140134529771264] [client 35.238.146.122:60860] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/frontend/.env"] [unique_id "ap14ho2k0yzxcd_3Y4tH-AAAAEQ"]
[Sun Sep 06 09:28:23.374347 2026] [:error] [pid 9497:tid 140134546556672] [client 35.238.146.122:60866] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/src/.env"] [unique_id "ap14hzN1K9zF5GGDr7YI4gAAAMI"]
[Sun Sep 06 09:28:23.963899 2026] [:error] [pid 9583:tid 140134364174080] [client 35.238.146.122:60872] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/core/.env"] [unique_id "ap14h_hF6tTT-2YP-moQ2gAAAQ8"]
[Sun Sep 06 09:28:24.561897 2026] [:error] [pid 9583:tid 140134422923008] [client 35.238.146.122:60888] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/core/app/.env"] [unique_id "ap14iPhF6tTT-2YP-moQ2wAAAQg"]
[Sun Sep 06 09:28:25.177836 2026] [:error] [pid 9498:tid 140134305425152] [client 35.238.146.122:35592] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/config/.env"] [unique_id "ap14iU85o6C7WMFTapP1ZQAAABY"]
[Sun Sep 06 09:28:25.761177 2026] [:error] [pid 9583:tid 140134355781376] [client 35.238.146.122:35600] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/private/.env"] [unique_id "ap14ifhF6tTT-2YP-moQ3wAAARA"]
[Sun Sep 06 09:28:26.310252 2026] [:error] [pid 9496:tid 140134448101120] [client 35.238.146.122:35610] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/application/.env"] [unique_id "ap14ilp2h8ZYqaIyuoe2zwAAAIU"]
[Sun Sep 06 09:28:26.872414 2026] [:error] [pid 9583:tid 140134546556672] [client 35.238.146.122:35626] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/bootstrap/.env"] [unique_id "ap14ivhF6tTT-2YP-moQ4gAAAQI"]
[Sun Sep 06 09:28:27.495344 2026] [:error] [pid 9498:tid 140134338995968] [client 35.238.146.122:35632] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/database/.env"] [unique_id "ap14i085o6C7WMFTapP1ZwAAABI"]
[Sun Sep 06 09:28:28.080943 2026] [:error] [pid 23146:tid 140134347388672] [client 35.238.146.122:35640] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/storage/.env"] [unique_id "ap14jI2k0yzxcd_3Y4tH_wAAAFE"]
[Sun Sep 06 09:28:28.623217 2026] [:error] [pid 9583:tid 140134313817856] [client 35.238.146.122:35648] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/var/www/.env"] [unique_id "ap14jPhF6tTT-2YP-moQ5QAAARU"]
[Sun Sep 06 09:28:29.145544 2026] [:error] [pid 9496:tid 140134563342080] [client 35.238.146.122:35664] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/var/www/html/.env"] [unique_id "ap14jVp2h8ZYqaIyuoe21AAAAIA"]
[Sun Sep 06 09:28:29.687720 2026] [:error] [pid 9583:tid 140134389352192] [client 35.238.146.122:35670] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/current/.env"] [unique_id "ap14jfhF6tTT-2YP-moQ6gAAAQw"]
[Sun Sep 06 09:28:30.262141 2026] [:error] [pid 9496:tid 140134364174080] [client 35.238.146.122:35678] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/release/.env"] [unique_id "ap14jlp2h8ZYqaIyuoe21gAAAI8"]
[Sun Sep 06 09:28:30.808657 2026] [:error] [pid 9498:tid 140134364174080] [client 35.238.146.122:35682] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/releases/.env"] [unique_id "ap14jk85o6C7WMFTapP1agAAAA8"]
[Sun Sep 06 09:28:31.353314 2026] [:error] [pid 23146:tid 140134389352192] [client 35.238.146.122:35696] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/shared/.env"] [unique_id "ap14j42k0yzxcd_3Y4tIAgAAAEw"]
[Sun Sep 06 09:28:31.890609 2026] [:error] [pid 9583:tid 140134431315712] [client 35.238.146.122:35712] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/deploy/.env"] [unique_id "ap14j_hF6tTT-2YP-moQ7wAAAQc"]
[Sun Sep 06 09:28:32.430876 2026] [:error] [pid 9583:tid 140134380959488] [client 35.238.146.122:35714] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/build/.env"] [unique_id "ap14kPhF6tTT-2YP-moQ8wAAAQ0"]
[Sun Sep 06 09:28:32.974053 2026] [:error] [pid 9583:tid 140134563342080] [client 35.238.146.122:35720] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dist/.env"] [unique_id "ap14kPhF6tTT-2YP-moQ9AAAAQA"]
[Sun Sep 06 09:28:33.507622 2026] [:error] [pid 9498:tid 140134397744896] [client 35.238.146.122:35728] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/public_html/.env"] [unique_id "ap14kU85o6C7WMFTapP1bgAAAAs"]
[Sun Sep 06 09:28:34.048612 2026] [:error] [pid 9583:tid 140134347388672] [client 35.238.146.122:35736] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/htdocs/.env"] [unique_id "ap14kvhF6tTT-2YP-moQ-gAAARE"]
[Sun Sep 06 09:28:34.599009 2026] [:error] [pid 9583:tid 140134431315712] [client 35.238.146.122:35738] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/www/.env"] [unique_id "ap14kvhF6tTT-2YP-moQ_AAAAQc"]
[Sun Sep 06 09:28:35.213889 2026] [:error] [pid 23146:tid 140134448101120] [client 35.238.146.122:44472] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/html/.env"] [unique_id "ap14k42k0yzxcd_3Y4tIBgAAAEU"]
[Sun Sep 06 09:28:35.714675 2026] [:error] [pid 9583:tid 140134380959488] [client 35.238.146.122:44476] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/live/.env"] [unique_id "ap14k_hF6tTT-2YP-moQ_gAAAQ0"]
[Sun Sep 06 09:28:36.247719 2026] [:error] [pid 9583:tid 140134330603264] [client 35.238.146.122:44480] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/prod/.env"] [unique_id "ap14lPhF6tTT-2YP-moQ_wAAARM"]
[Sun Sep 06 09:28:36.782734 2026] [:error] [pid 9583:tid 140134422923008] [client 35.238.146.122:44494] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dev/.env"] [unique_id "ap14lPhF6tTT-2YP-moRAQAAAQg"]
[Sun Sep 06 09:28:37.346453 2026] [:error] [pid 23146:tid 140134546556672] [client 35.238.146.122:44510] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/staging/.env"] [unique_id "ap14lY2k0yzxcd_3Y4tICgAAAEI"]
[Sun Sep 06 09:28:37.883769 2026] [:error] [pid 9498:tid 140134347388672] [client 35.238.146.122:44522] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/opt/.env"] [unique_id "ap14lU85o6C7WMFTapP1bwAAABE"]
[Sun Sep 06 09:28:38.413123 2026] [:error] [pid 9498:tid 140134355781376] [client 35.238.146.122:44538] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/laravel/.env"] [unique_id "ap14lk85o6C7WMFTapP1cAAAABA"]
[Sun Sep 06 09:28:38.965284 2026] [:error] [pid 9498:tid 140134431315712] [client 35.238.146.122:44554] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/symfony/.env"] [unique_id "ap14lk85o6C7WMFTapP1dAAAAAc"]
[Sun Sep 06 09:28:39.559510 2026] [:error] [pid 9497:tid 140134288639744] [client 35.238.146.122:44564] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wordpress/.env"] [unique_id "ap14lzN1K9zF5GGDr7YI7QAAANg"]
[Sun Sep 06 09:28:40.140230 2026] [:error] [pid 23146:tid 140134347388672] [client 35.238.146.122:44574] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp/.env"] [unique_id "ap14mI2k0yzxcd_3Y4tIDQAAAFE"]
[Sun Sep 06 09:28:40.666913 2026] [:error] [pid 23146:tid 140134397744896] [client 35.238.146.122:44580] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cms/.env"] [unique_id "ap14mI2k0yzxcd_3Y4tIDgAAAEs"]
[Sun Sep 06 09:28:41.188269 2026] [:error] [pid 9496:tid 140134288639744] [client 35.238.146.122:44596] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/drupal/.env"] [unique_id "ap14mVp2h8ZYqaIyuoe23gAAAJg"]
[Sun Sep 06 09:28:41.718141 2026] [:error] [pid 9583:tid 140134322210560] [client 35.238.146.122:44600] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/joomla/.env"] [unique_id "ap14mfhF6tTT-2YP-moRCQAAARQ"]
[Sun Sep 06 09:28:42.262794 2026] [:error] [pid 9498:tid 140134297032448] [client 35.238.146.122:44614] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/magento/.env"] [unique_id "ap14mk85o6C7WMFTapP1eQAAABc"]
[Sun Sep 06 09:28:42.784355 2026] [:error] [pid 9498:tid 140134422923008] [client 35.238.146.122:44626] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/shopify/.env"] [unique_id "ap14mk85o6C7WMFTapP1ewAAAAg"]
[Sun Sep 06 09:28:43.312704 2026] [:error] [pid 9496:tid 140134563342080] [client 35.238.146.122:44638] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/prestashop/.env"] [unique_id "ap14m1p2h8ZYqaIyuoe24AAAAIA"]
[Sun Sep 06 09:28:43.904521 2026] [:error] [pid 9497:tid 140134406137600] [client 35.238.146.122:44644] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/codeigniter/.env"] [unique_id "ap14mzN1K9zF5GGDr7YI7wAAAMo"]
[Sun Sep 06 09:28:44.469625 2026] [:error] [pid 9583:tid 140134422923008] [client 35.238.146.122:44652] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cakephp/.env"] [unique_id "ap14nPhF6tTT-2YP-moRDwAAAQg"]
[Sun Sep 06 09:28:44.977561 2026] [:error] [pid 23146:tid 140134563342080] [client 35.238.146.122:44654] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/zend/.env"] [unique_id "ap14nI2k0yzxcd_3Y4tIEwAAAEA"]
[Sun Sep 06 09:28:45.493872 2026] [:error] [pid 9583:tid 140134529771264] [client 35.238.146.122:37944] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/yii/.env"] [unique_id "ap14nfhF6tTT-2YP-moREAAAAQQ"]
[Sun Sep 06 09:28:46.101816 2026] [:error] [pid 9583:tid 140134431315712] [client 35.238.146.122:37952] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/laravel5/.env"] [unique_id "ap14nvhF6tTT-2YP-moREgAAAQc"]
[Sun Sep 06 09:28:46.656488 2026] [:error] [pid 9498:tid 140134431315712] [client 35.238.146.122:37962] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v1/.env"] [unique_id "ap14nk85o6C7WMFTapP1fwAAAAc"]
[Sun Sep 06 09:28:47.277011 2026] [:error] [pid 9496:tid 140134297032448] [client 35.238.146.122:37978] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v2/.env"] [unique_id "ap14n1p2h8ZYqaIyuoe24gAAAJc"]
[Sun Sep 06 09:28:47.831133 2026] [:error] [pid 9498:tid 140134372566784] [client 35.238.146.122:37990] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v3/.env"] [unique_id "ap14n085o6C7WMFTapP1gAAAAA4"]
[Sun Sep 06 09:28:48.400270 2026] [:error] [pid 9497:tid 140134538163968] [client 35.238.146.122:37992] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/v1/.env"] [unique_id "ap14oDN1K9zF5GGDr7YI8QAAAMM"]
[Sun Sep 06 09:28:48.920532 2026] [:error] [pid 9496:tid 140134330603264] [client 35.238.146.122:37996] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/v2/.env"] [unique_id "ap14oFp2h8ZYqaIyuoe26wAAAJM"]
[Sun Sep 06 09:28:49.485359 2026] [:error] [pid 9498:tid 140134538163968] [client 35.238.146.122:38010] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/rest/.env"] [unique_id "ap14oU85o6C7WMFTapP1hAAAAAM"]
[Sun Sep 06 09:28:50.065298 2026] [:error] [pid 9496:tid 140134406137600] [client 35.238.146.122:38026] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/graphql/.env"] [unique_id "ap14olp2h8ZYqaIyuoe27gAAAIo"]
[Sun Sep 06 09:28:50.629494 2026] [:error] [pid 9497:tid 140134431315712] [client 35.238.146.122:38040] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/gateway/.env"] [unique_id "ap14ojN1K9zF5GGDr7YI9gAAAMc"]
[Sun Sep 06 09:28:51.174272 2026] [:error] [pid 9497:tid 140134422923008] [client 35.238.146.122:38052] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/microservice/.env"] [unique_id "ap14ozN1K9zF5GGDr7YI-QAAAMg"]
[Sun Sep 06 09:28:51.787793 2026] [:error] [pid 9497:tid 140134563342080] [client 35.238.146.122:38060] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/service/.env"] [unique_id "ap14ozN1K9zF5GGDr7YI-gAAAMA"]
[Sun Sep 06 09:28:52.368356 2026] [:error] [pid 9583:tid 140134414530304] [client 35.238.146.122:38070] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/v3/.env"] [unique_id "ap14pPhF6tTT-2YP-moRIAAAAQk"]
[Sun Sep 06 09:28:52.994856 2026] [:error] [pid 9498:tid 140134448101120] [client 35.238.146.122:38072] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/dev/.env"] [unique_id "ap14pE85o6C7WMFTapP1iAAAAAU"]
[Sun Sep 06 09:28:53.543745 2026] [:error] [pid 23146:tid 140134347388672] [client 35.238.146.122:38086] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/staging/.env"] [unique_id "ap14pY2k0yzxcd_3Y4tIJAAAAFE"]
[Sun Sep 06 09:28:54.079091 2026] [:error] [pid 9583:tid 140134347388672] [client 35.238.146.122:38096] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/vendor/.env"] [unique_id "ap14pvhF6tTT-2YP-moRJgAAARE"]
[Sun Sep 06 09:28:54.713155 2026] [:error] [pid 23146:tid 140134389352192] [client 35.238.146.122:38098] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/lib/.env"] [unique_id "ap14po2k0yzxcd_3Y4tIKAAAAEw"]
[Sun Sep 06 09:28:55.277997 2026] [:error] [pid 9498:tid 140134313817856] [client 35.238.146.122:58674] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/resources/.env"] [unique_id "ap14p085o6C7WMFTapP1kwAAABU"]
[Sun Sep 06 09:28:55.796790 2026] [:error] [pid 9583:tid 140134414530304] [client 35.238.146.122:58682] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/assets/.env"] [unique_id "ap14p_hF6tTT-2YP-moRKgAAAQk"]
[Sun Sep 06 09:28:56.323065 2026] [:error] [pid 9497:tid 140134372566784] [client 35.238.146.122:58696] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/uploads/.env"] [unique_id "ap14qDN1K9zF5GGDr7YI_QAAAM4"]
[Sun Sep 06 09:28:56.861610 2026] [:error] [pid 9583:tid 140134322210560] [client 35.238.146.122:58700] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/internal/.env"] [unique_id "ap14qPhF6tTT-2YP-moRKwAAARQ"]
[Sun Sep 06 09:28:57.419834 2026] [:error] [pid 9583:tid 140134364174080] [client 35.238.146.122:58702] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/tools/.env"] [unique_id "ap14qfhF6tTT-2YP-moRMAAAAQ8"]
[Sun Sep 06 09:28:57.992590 2026] [:error] [pid 9497:tid 140134305425152] [client 35.238.146.122:58710] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/scripts/.env"] [unique_id "ap14qTN1K9zF5GGDr7YJAAAAANY"]
[Sun Sep 06 09:28:58.549831 2026] [:error] [pid 9583:tid 140134529771264] [client 35.238.146.122:58718] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/bin/.env"] [unique_id "ap14qvhF6tTT-2YP-moROgAAAQQ"]
[Sun Sep 06 09:28:59.089938 2026] [:error] [pid 9583:tid 140134554949376] [client 35.238.146.122:58726] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sbin/.env"] [unique_id "ap14q_hF6tTT-2YP-moRQgAAAQE"]
[Sun Sep 06 09:28:59.618419 2026] [:error] [pid 9583:tid 140134372566784] [client 35.238.146.122:58730] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/local/.env"] [unique_id "ap14q_hF6tTT-2YP-moRRgAAAQ4"]
[Sun Sep 06 09:29:00.184978 2026] [:error] [pid 9498:tid 140134288639744] [client 35.238.146.122:58744] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/portal/.env"] [unique_id "ap14rE85o6C7WMFTapP1lwAAABg"]
[Sun Sep 06 09:29:00.753569 2026] [:error] [pid 9583:tid 140134313817856] [client 35.238.146.122:58752] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dashboard/.env"] [unique_id "ap14rPhF6tTT-2YP-moRTgAAARU"]
[Sun Sep 06 09:29:01.348027 2026] [:error] [pid 9497:tid 140134422923008] [client 35.238.146.122:58762] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/panel/.env"] [unique_id "ap14rTN1K9zF5GGDr7YJBQAAAMg"]
[Sun Sep 06 09:29:01.931504 2026] [:error] [pid 9498:tid 140134330603264] [client 35.238.146.122:58774] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/crm/.env"] [unique_id "ap14rU85o6C7WMFTapP1mQAAABM"]
[Sun Sep 06 09:29:02.453237 2026] [:error] [pid 9583:tid 140134330603264] [client 35.238.146.122:58782] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/erp/.env"] [unique_id "ap14rvhF6tTT-2YP-moRUwAAARM"]
[Sun Sep 06 09:29:03.046087 2026] [:error] [pid 9583:tid 140134364174080] [client 35.238.146.122:58798] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/shop/.env"] [unique_id "ap14r_hF6tTT-2YP-moRVQAAAQ8"]
[Sun Sep 06 09:29:03.623921 2026] [:error] [pid 9497:tid 140134563342080] [client 35.238.146.122:58812] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/store/.env"] [unique_id "ap14rzN1K9zF5GGDr7YJBgAAAMA"]
[Sun Sep 06 09:29:04.224331 2026] [:error] [pid 9583:tid 140134313817856] [client 35.238.146.122:58820] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/saas/.env"] [unique_id "ap14sPhF6tTT-2YP-moRVwAAARU"]
[Sun Sep 06 09:29:04.853072 2026] [:error] [pid 9583:tid 140134372566784] [client 35.238.146.122:58832] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/client/.env"] [unique_id "ap14sPhF6tTT-2YP-moRWAAAAQ4"]
[Sun Sep 06 09:29:05.388859 2026] [:error] [pid 23146:tid 140134372566784] [client 35.238.146.122:43108] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/project/.env"] [unique_id "ap14sY2k0yzxcd_3Y4tIOwAAAE4"]
[Sun Sep 06 09:29:05.927283 2026] [:error] [pid 9498:tid 140134297032448] [client 35.238.146.122:43120] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin-panel/.env"] [unique_id "ap14sU85o6C7WMFTapP1ngAAABc"]
[Sun Sep 06 09:29:06.505157 2026] [:error] [pid 9497:tid 140134364174080] [client 35.238.146.122:43136] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/control-panel/.env"] [unique_id "ap14sjN1K9zF5GGDr7YJCAAAAM8"]
[Sun Sep 06 09:29:07.061595 2026] [:error] [pid 9497:tid 140134406137600] [client 35.238.146.122:43150] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/user-panel/.env"] [unique_id "ap14szN1K9zF5GGDr7YJCQAAAMo"]
[Sun Sep 06 09:29:07.703865 2026] [:error] [pid 9498:tid 140134422923008] [client 35.238.146.122:43160] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/node/.env"] [unique_id "ap14s085o6C7WMFTapP1oAAAAAg"]
[Sun Sep 06 09:29:08.271064 2026] [:error] [pid 23146:tid 140134338995968] [client 35.238.146.122:43162] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/express/.env"] [unique_id "ap14tI2k0yzxcd_3Y4tIPQAAAFI"]
[Sun Sep 06 09:29:08.825126 2026] [:error] [pid 9498:tid 140134322210560] [client 35.238.146.122:43166] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/next/.env"] [unique_id "ap14tE85o6C7WMFTapP1ogAAABQ"]
[Sun Sep 06 09:29:09.408490 2026] [:error] [pid 9498:tid 140134364174080] [client 35.238.146.122:43174] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/nuxt/.env"] [unique_id "ap14tU85o6C7WMFTapP1pAAAAA8"]
[Sun Sep 06 09:29:09.981061 2026] [:error] [pid 23146:tid 140134389352192] [client 35.238.146.122:43178] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/nest/.env"] [unique_id "ap14tY2k0yzxcd_3Y4tIPwAAAEw"]
[Sun Sep 06 09:29:10.518176 2026] [:error] [pid 9496:tid 140134439708416] [client 35.238.146.122:43184] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/react/.env"] [unique_id "ap14tlp2h8ZYqaIyuoe2_gAAAIY"]
[Sun Sep 06 09:29:11.037726 2026] [:error] [pid 23146:tid 140134448101120] [client 35.238.146.122:43200] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/vue/.env"] [unique_id "ap14t42k0yzxcd_3Y4tIRQAAAEU"]
[Sun Sep 06 09:29:11.616093 2026] [:error] [pid 9583:tid 140134338995968] [client 35.238.146.122:43216] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/angular/.env"] [unique_id "ap14t_hF6tTT-2YP-moRaQAAARI"]
[Sun Sep 06 09:29:12.135101 2026] [:error] [pid 9583:tid 140134406137600] [client 35.238.146.122:43226] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/svelte/.env"] [unique_id "ap14uPhF6tTT-2YP-moRbAAAAQo"]
[Sun Sep 06 09:29:12.694885 2026] [:error] [pid 9583:tid 140134313817856] [client 35.238.146.122:43232] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/vite/.env"] [unique_id "ap14uPhF6tTT-2YP-moRbQAAARU"]
[Sun Sep 06 09:29:13.287121 2026] [:error] [pid 9583:tid 140134297032448] [client 35.238.146.122:43238] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backup/.env"] [unique_id "ap14ufhF6tTT-2YP-moRbgAAARc"]
[Sun Sep 06 09:29:13.889659 2026] [:error] [pid 9583:tid 140134355781376] [client 35.238.146.122:43252] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backups/.env"] [unique_id "ap14ufhF6tTT-2YP-moRcAAAARA"]
[Sun Sep 06 09:29:14.451350 2026] [:error] [pid 9583:tid 140134288639744] [client 35.238.146.122:43262] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/old/.env"] [unique_id "ap14uvhF6tTT-2YP-moRcQAAARg"]
[Sun Sep 06 09:29:14.986830 2026] [:error] [pid 9497:tid 140134322210560] [client 35.238.146.122:43276] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/tmp/.env"] [unique_id "ap14ujN1K9zF5GGDr7YJCwAAANQ"]
[Sun Sep 06 09:29:15.567354 2026] [:error] [pid 9583:tid 140134431315712] [client 35.238.146.122:53418] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/temp/.env"] [unique_id "ap14u_hF6tTT-2YP-moRdQAAAQc"]
[Sun Sep 06 09:29:16.135252 2026] [:error] [pid 9498:tid 140134305425152] [client 35.238.146.122:53426] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/lab/.env"] [unique_id "ap14vE85o6C7WMFTapP1qAAAABY"]
[Sun Sep 06 09:29:16.702775 2026] [:error] [pid 23146:tid 140134431315712] [client 35.238.146.122:53430] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cronlab/.env"] [unique_id "ap14vI2k0yzxcd_3Y4tISAAAAEc"]
[Sun Sep 06 09:29:17.250213 2026] [:error] [pid 9583:tid 140134414530304] [client 35.238.146.122:53434] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cron/.env"] [unique_id "ap14vfhF6tTT-2YP-moRfQAAAQk"]
[Sun Sep 06 09:29:17.791597 2026] [:error] [pid 9583:tid 140134546556672] [client 35.238.146.122:53440] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/en/.env"] [unique_id "ap14vfhF6tTT-2YP-moRgAAAAQI"]
[Sun Sep 06 09:29:18.324561 2026] [:error] [pid 9583:tid 140134338995968] [client 35.238.146.122:53452] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/administrator/.env"] [unique_id "ap14vvhF6tTT-2YP-moRggAAARI"]
[Sun Sep 06 09:29:18.889174 2026] [:error] [pid 23146:tid 140134338995968] [client 35.238.146.122:53466] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/psnlink/.env"] [unique_id "ap14vo2k0yzxcd_3Y4tISgAAAFI"]
[Sun Sep 06 09:29:19.384570 2026] [:error] [pid 9498:tid 140134422923008] [client 35.238.146.122:53472] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/exapi/.env"] [unique_id "ap14v085o6C7WMFTapP1rgAAAAg"]
[Sun Sep 06 09:29:19.940091 2026] [:error] [pid 9497:tid 140134431315712] [client 35.238.146.122:53484] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sitemaps/.env"] [unique_id "ap14vzN1K9zF5GGDr7YJDQAAAMc"]
[Sun Sep 06 09:29:20.438353 2026] [:error] [pid 9583:tid 140134554949376] [client 35.238.146.122:53496] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup1"] [unique_id "ap14wPhF6tTT-2YP-moRhwAAAQE"]
[Sun Sep 06 09:29:20.938047 2026] [:error] [pid 9583:tid 140134414530304] [client 35.238.146.122:53498] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup2"] [unique_id "ap14wPhF6tTT-2YP-moRiAAAAQk"]
[Sun Sep 06 09:29:21.435180 2026] [:error] [pid 9583:tid 140134364174080] [client 35.238.146.122:53500] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/logs/.env"] [unique_id "ap14wfhF6tTT-2YP-moRigAAAQ8"]
[Sun Sep 06 09:29:21.963800 2026] [:error] [pid 9583:tid 140134338995968] [client 35.238.146.122:53508] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cache/.env"] [unique_id "ap14wfhF6tTT-2YP-moRjAAAARI"]
[Sun Sep 06 09:29:22.452180 2026] [:error] [pid 23146:tid 140134389352192] [client 35.238.146.122:53520] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailer/.env"] [unique_id "ap14wo2k0yzxcd_3Y4tITAAAAEw"]
[Sun Sep 06 09:29:22.964534 2026] [:error] [pid 9498:tid 140134330603264] [client 35.238.146.122:53536] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mail/.env"] [unique_id "ap14wk85o6C7WMFTapP1sAAAABM"]
[Sun Sep 06 09:29:23.491604 2026] [:error] [pid 23146:tid 140134364174080] [client 35.238.146.122:53550] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/email/.env"] [unique_id "ap14w42k0yzxcd_3Y4tITQAAAE8"]
[Sun Sep 06 09:29:23.990221 2026] [:error] [pid 9583:tid 140134529771264] [client 35.238.146.122:53554] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/smtp/.env"] [unique_id "ap14w_hF6tTT-2YP-moRjgAAAQQ"]
[Sun Sep 06 09:29:24.520532 2026] [:error] [pid 23146:tid 140134406137600] [client 35.238.146.122:53556] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailing/.env"] [unique_id "ap14xI2k0yzxcd_3Y4tITgAAAEo"]
[Sun Sep 06 09:29:25.038311 2026] [:error] [pid 9496:tid 140134414530304] [client 35.238.146.122:53562] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/notifications/.env"] [unique_id "ap14xVp2h8ZYqaIyuoe3BQAAAIk"]
[Sun Sep 06 09:29:25.538057 2026] [:error] [pid 9496:tid 140134546556672] [client 35.238.146.122:38276] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/notify/.env"] [unique_id "ap14xVp2h8ZYqaIyuoe3BgAAAII"]
[Sun Sep 06 09:29:26.042362 2026] [:error] [pid 9498:tid 140134305425152] [client 35.238.146.122:38290] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sender/.env"] [unique_id "ap14xk85o6C7WMFTapP1tAAAABY"]
[Sun Sep 06 09:29:26.557575 2026] [:error] [pid 9583:tid 140134330603264] [client 35.238.146.122:38298] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/campaign/.env"] [unique_id "ap14xvhF6tTT-2YP-moRkAAAARM"]
[Sun Sep 06 09:29:27.064005 2026] [:error] [pid 9497:tid 140134330603264] [client 35.238.146.122:38314] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/newsletter/.env"] [unique_id "ap14xzN1K9zF5GGDr7YJDgAAANM"]
[Sun Sep 06 09:29:27.597700 2026] [:error] [pid 9583:tid 140134297032448] [client 35.238.146.122:38324] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/ses/.env"] [unique_id "ap14x_hF6tTT-2YP-moRkwAAARc"]
[Sun Sep 06 09:29:28.117757 2026] [:error] [pid 9583:tid 140134414530304] [client 35.238.146.122:38332] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sendgrid/.env"] [unique_id "ap14yPhF6tTT-2YP-moRlAAAAQk"]
[Sun Sep 06 09:29:28.607411 2026] [:error] [pid 23146:tid 140134431315712] [client 35.238.146.122:38342] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sparkpost/.env"] [unique_id "ap14yI2k0yzxcd_3Y4tIVQAAAEc"]
[Sun Sep 06 09:29:29.176149 2026] [:error] [pid 9583:tid 140134355781376] [client 35.238.146.122:38348] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/postmark/.env"] [unique_id "ap14yfhF6tTT-2YP-moRlQAAARA"]
[Sun Sep 06 09:29:29.705961 2026] [:error] [pid 9583:tid 140134338995968] [client 35.238.146.122:38364] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailgun/.env"] [unique_id "ap14yfhF6tTT-2YP-moRlwAAARI"]
[Sun Sep 06 09:29:30.208527 2026] [:error] [pid 23146:tid 140134338995968] [client 35.238.146.122:38378] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mandrill/.env"] [unique_id "ap14yo2k0yzxcd_3Y4tIVgAAAFI"]
[Sun Sep 06 09:29:30.703909 2026] [:error] [pid 9496:tid 140134397744896] [client 35.238.146.122:38384] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailjet/.env"] [unique_id "ap14ylp2h8ZYqaIyuoe3BwAAAIs"]
[Sun Sep 06 09:29:31.250231 2026] [:error] [pid 9496:tid 140134322210560] [client 35.238.146.122:38396] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/brevo/.env"] [unique_id "ap14y1p2h8ZYqaIyuoe3CAAAAJQ"]
[Sun Sep 06 09:29:31.821065 2026] [:error] [pid 23146:tid 140134414530304] [client 35.238.146.122:38398] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/transactional/.env"] [unique_id "ap14y42k0yzxcd_3Y4tIVwAAAEk"]
[Sun Sep 06 09:29:32.331194 2026] [:error] [pid 9496:tid 140134355781376] [client 35.238.146.122:38412] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/bulk/.env"] [unique_id "ap14zFp2h8ZYqaIyuoe3CgAAAJA"]
[Sun Sep 06 09:29:32.905704 2026] [:error] [pid 9583:tid 140134406137600] [client 35.238.146.122:38426] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/aws/.env"] [unique_id "ap14zPhF6tTT-2YP-moRmAAAAQo"]
[Sun Sep 06 09:29:33.426413 2026] [:error] [pid 23146:tid 140134364174080] [client 35.238.146.122:38442] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/azure/.env"] [unique_id "ap14zY2k0yzxcd_3Y4tIWAAAAE8"]
[Sun Sep 06 09:29:33.948335 2026] [:error] [pid 9583:tid 140134422923008] [client 35.238.146.122:38444] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/gcp/.env"] [unique_id "ap14zfhF6tTT-2YP-moRmQAAAQg"]
[Sun Sep 06 09:29:34.485509 2026] [:error] [pid 9583:tid 140134322210560] [client 35.238.146.122:38460] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cloud/.env"] [unique_id "ap14zvhF6tTT-2YP-moRmgAAARQ"]
[Sun Sep 06 09:29:35.025474 2026] [:error] [pid 9496:tid 140134330603264] [client 35.238.146.122:38468] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/infrastructure/.env"] [unique_id "ap14z1p2h8ZYqaIyuoe3DwAAAJM"]
[Sun Sep 06 09:29:35.638498 2026] [:error] [pid 9583:tid 140134330603264] [client 35.238.146.122:53428] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/docker/.env"] [unique_id "ap14z_hF6tTT-2YP-moRmwAAARM"]
[Sun Sep 06 09:29:36.224584 2026] [:error] [pid 9497:tid 140134364174080] [client 35.238.146.122:53444] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/k8s/.env"] [unique_id "ap140DN1K9zF5GGDr7YJEQAAAM8"]
[Sun Sep 06 09:29:36.766038 2026] [:error] [pid 9496:tid 140134422923008] [client 35.238.146.122:53452] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/kubernetes/.env"] [unique_id "ap140Fp2h8ZYqaIyuoe3EAAAAIg"]
[Sun Sep 06 09:29:37.344798 2026] [:error] [pid 9496:tid 140134414530304] [client 35.238.146.122:53460] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/terraform/.env"] [unique_id "ap140Vp2h8ZYqaIyuoe3EgAAAIk"]
[Sun Sep 06 09:29:37.966222 2026] [:error] [pid 9583:tid 140134355781376] [client 35.238.146.122:53466] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/ansible/.env"] [unique_id "ap140fhF6tTT-2YP-moRnwAAARA"]
[Sun Sep 06 09:29:38.548749 2026] [:error] [pid 9498:tid 140134288639744] [client 35.238.146.122:53482] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/.env"] [unique_id "ap140k85o6C7WMFTapP1ugAAABg"]
[Sun Sep 06 09:29:39.102826 2026] [:error] [pid 23146:tid 140134305425152] [client 35.238.146.122:53494] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/ci/.env"] [unique_id "ap14042k0yzxcd_3Y4tIWgAAAFY"]
[Sun Sep 06 09:29:39.686056 2026] [:error] [pid 23146:tid 140134422923008] [client 35.238.146.122:53502] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cd/.env"] [unique_id "ap14042k0yzxcd_3Y4tIXAAAAEg"]
[Sun Sep 06 09:29:40.259206 2026] [:error] [pid 9583:tid 140134406137600] [client 35.238.146.122:53508] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/jenkins/.env"] [unique_id "ap141PhF6tTT-2YP-moRpQAAAQo"]
[Sun Sep 06 09:29:40.835892 2026] [:error] [pid 23146:tid 140134297032448] [client 35.238.146.122:53516] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/gitlab/.env"] [unique_id "ap141I2k0yzxcd_3Y4tIXQAAAFc"]
[Sun Sep 06 09:29:41.412544 2026] [:error] [pid 23146:tid 140134439708416] [client 35.238.146.122:53526] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/github/.env"] [unique_id "ap141Y2k0yzxcd_3Y4tIXgAAAEY"]
[Sun Sep 06 09:29:42.007528 2026] [:error] [pid 9496:tid 140134406137600] [client 35.238.146.122:53538] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/actions/.env"] [unique_id "ap141lp2h8ZYqaIyuoe3EwAAAIo"]
[Sun Sep 06 09:29:42.563326 2026] [:error] [pid 9497:tid 140134313817856] [client 35.238.146.122:53554] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/circleci/.env"] [unique_id "ap141jN1K9zF5GGDr7YJFgAAANU"]
[Sun Sep 06 09:29:43.117742 2026] [:error] [pid 9583:tid 140134322210560] [client 35.238.146.122:53570] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/travis/.env"] [unique_id "ap141_hF6tTT-2YP-moRpwAAARQ"]
[Sun Sep 06 09:29:43.660091 2026] [:error] [pid 23146:tid 140134322210560] [client 35.238.146.122:53580] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/buildkite/.env"] [unique_id "ap14142k0yzxcd_3Y4tIYgAAAFQ"]
[Sun Sep 06 09:29:44.253296 2026] [:error] [pid 23146:tid 140134389352192] [client 35.238.146.122:53582] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mysql/.env"] [unique_id "ap142I2k0yzxcd_3Y4tIYwAAAEw"]
[Sun Sep 06 09:29:44.798490 2026] [:error] [pid 9498:tid 140134330603264] [client 35.238.146.122:53598] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/postgres/.env"] [unique_id "ap142E85o6C7WMFTapP1vQAAABM"]
[Sun Sep 06 09:29:45.345698 2026] [:error] [pid 9496:tid 140134347388672] [client 35.238.146.122:43658] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mongodb/.env"] [unique_id "ap142Vp2h8ZYqaIyuoe3FAAAAJE"]
[Sun Sep 06 09:29:45.896585 2026] [:error] [pid 9497:tid 140134431315712] [client 35.238.146.122:43668] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/redis/.env"] [unique_id "ap142TN1K9zF5GGDr7YJGAAAAMc"]
[Sun Sep 06 09:29:46.472024 2026] [:error] [pid 9583:tid 140134397744896] [client 35.238.146.122:43672] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/elasticsearch/.env"] [unique_id "ap142vhF6tTT-2YP-moRrwAAAQs"]
[Sun Sep 06 09:29:47.027280 2026] [:error] [pid 9583:tid 140134305425152] [client 35.238.146.122:43686] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/rabbitmq/.env"] [unique_id "ap142_hF6tTT-2YP-moRtQAAARY"]
[Sun Sep 06 09:29:47.583351 2026] [:error] [pid 9498:tid 140134546556672] [client 35.238.146.122:43694] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/kafka/.env"] [unique_id "ap142085o6C7WMFTapP1wQAAAAI"]
[Sun Sep 06 09:29:48.156482 2026] [:error] [pid 9583:tid 140134380959488] [client 35.238.146.122:43708] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/queue/.env"] [unique_id "ap143PhF6tTT-2YP-moRtwAAAQ0"]
[Sun Sep 06 09:29:48.733336 2026] [:error] [pid 9497:tid 140134448101120] [client 35.238.146.122:43724] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/worker/.env"] [unique_id "ap143DN1K9zF5GGDr7YJGwAAAMU"]
[Sun Sep 06 09:29:49.299152 2026] [:error] [pid 23146:tid 140134448101120] [client 35.238.146.122:43738] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/job/.env"] [unique_id "ap143Y2k0yzxcd_3Y4tIcQAAAEU"]
[Sun Sep 06 09:29:49.870595 2026] [:error] [pid 9497:tid 140134563342080] [client 35.238.146.122:43746] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/test/.env"] [unique_id "ap143TN1K9zF5GGDr7YJHQAAAMA"]
[Sun Sep 06 09:29:50.484233 2026] [:error] [pid 23146:tid 140134546556672] [client 35.238.146.122:43752] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/qa/.env"] [unique_id "ap143o2k0yzxcd_3Y4tIcwAAAEI"]
[Sun Sep 06 09:29:51.139051 2026] [:error] [pid 9498:tid 140134439708416] [client 35.238.146.122:43760] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/preview/.env"] [unique_id "ap143085o6C7WMFTapP1xQAAAAY"]
[Sun Sep 06 09:29:51.727959 2026] [:error] [pid 9583:tid 140134414530304] [client 35.238.146.122:43770] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/beta/.env"] [unique_id "ap143_hF6tTT-2YP-moRvwAAAQk"]
[Sun Sep 06 09:29:52.307416 2026] [:error] [pid 23146:tid 140134397744896] [client 35.238.146.122:43782] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/uat/.env"] [unique_id "ap144I2k0yzxcd_3Y4tIdwAAAEs"]
[Sun Sep 06 09:29:52.906657 2026] [:error] [pid 23146:tid 140134554949376] [client 35.238.146.122:43788] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/stage/.env"] [unique_id "ap144I2k0yzxcd_3Y4tIeAAAAEE"]
[Sun Sep 06 09:29:53.506616 2026] [:error] [pid 9583:tid 140134538163968] [client 35.238.146.122:43790] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/development/.env"] [unique_id "ap144fhF6tTT-2YP-moRyQAAAQM"]
[Sun Sep 06 09:29:54.090448 2026] [:error] [pid 9583:tid 140134330603264] [client 35.238.146.122:43794] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/production/.env"] [unique_id "ap144vhF6tTT-2YP-moRywAAARM"]
[Sun Sep 06 09:29:54.697138 2026] [:error] [pid 9498:tid 140134448101120] [client 35.238.146.122:43800] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/config/app/.env"] [unique_id "ap144k85o6C7WMFTapP1xwAAAAU"]
[Sun Sep 06 09:29:55.321318 2026] [proxy_fcgi:error] [pid 9583:tid 140134563342080] [client 35.238.146.122:35184] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:29:55.902438 2026] [proxy_fcgi:error] [pid 23146:tid 140134422923008] [client 35.238.146.122:35196] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:29:56.478329 2026] [proxy_fcgi:error] [pid 9583:tid 140134364174080] [client 35.238.146.122:35208] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:29:57.023048 2026] [proxy_fcgi:error] [pid 9497:tid 140134380959488] [client 35.238.146.122:35224] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:29:57.649603 2026] [proxy_fcgi:error] [pid 9497:tid 140134305425152] [client 35.238.146.122:35228] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:29:58.236244 2026] [proxy_fcgi:error] [pid 9583:tid 140134313817856] [client 35.238.146.122:35240] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:29:58.967203 2026] [proxy_fcgi:error] [pid 23146:tid 140134338995968] [client 35.238.146.122:35246] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:30:00.207197 2026] [proxy_fcgi:error] [pid 9498:tid 140134546556672] [client 35.238.146.122:35274] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:30:00.778118 2026] [proxy_fcgi:error] [pid 9583:tid 140134355781376] [client 35.238.146.122:35280] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:30:01.415803 2026] [proxy_fcgi:error] [pid 9583:tid 140134397744896] [client 35.238.146.122:35296] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:30:05.526228 2026] [proxy_fcgi:error] [pid 9583:tid 140134554949376] [client 35.238.146.122:60198] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:30:06.127999 2026] [proxy_fcgi:error] [pid 9497:tid 140134355781376] [client 35.238.146.122:60208] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:30:06.665843 2026] [proxy_fcgi:error] [pid 23146:tid 140134414530304] [client 35.238.146.122:60222] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:30:07.248613 2026] [proxy_fcgi:error] [pid 9497:tid 140134380959488] [client 35.238.146.122:60232] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:30:07.836268 2026] [proxy_fcgi:error] [pid 9497:tid 140134414530304] [client 35.238.146.122:60248] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:30:08.448338 2026] [proxy_fcgi:error] [pid 9583:tid 140134563342080] [client 35.238.146.122:60258] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 09:30:10.892854 2026] [:error] [pid 9497:tid 140134322210560] [client 35.238.146.122:60288] [client 35.238.146.122] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.pesema.com"] [uri "/mail/phpinfo.php"] [unique_id "ap148jN1K9zF5GGDr7YJLwAAANQ"]
[Sun Sep 06 09:30:11.440553 2026] [:error] [pid 9583:tid 140134448101120] [client 35.238.146.122:60292] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cpanel/phpinfo.php"] [unique_id "ap148_hF6tTT-2YP-moR-AAAAQU"]
[Sun Sep 06 09:30:11.991467 2026] [:error] [pid 9498:tid 140134546556672] [client 35.238.146.122:60300] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/hosting/phpinfo.php"] [unique_id "ap148085o6C7WMFTapP11wAAAAI"]
[Sun Sep 06 09:30:12.529680 2026] [:error] [pid 9583:tid 140134554949376] [client 35.238.146.122:60306] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/webmail/phpinfo.php"] [unique_id "ap149PhF6tTT-2YP-moR-wAAAQE"]
[Sun Sep 06 09:30:13.144290 2026] [:error] [pid 9583:tid 140134338995968] [client 35.238.146.122:60312] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/smtp/phpinfo.php"] [unique_id "ap149fhF6tTT-2YP-moR_AAAARI"]
[Sun Sep 06 09:30:13.760953 2026] [:error] [pid 9498:tid 140134389352192] [client 35.238.146.122:60316] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php.bak"] [unique_id "ap149U85o6C7WMFTapP12wAAAAw"]
[Sun Sep 06 09:30:14.375449 2026] [:error] [pid 9497:tid 140134448101120] [client 35.238.146.122:60320] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php.old"] [unique_id "ap149jN1K9zF5GGDr7YJMwAAAMU"]
[Sun Sep 06 09:30:14.897461 2026] [:error] [pid 23146:tid 140134288639744] [client 35.238.146.122:60322] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php~"] [unique_id "ap149o2k0yzxcd_3Y4tImwAAAFg"]
[Sun Sep 06 09:30:15.529398 2026] [:error] [pid 23146:tid 140134397744896] [client 35.238.146.122:54242] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/info.php.bak"] [unique_id "ap14942k0yzxcd_3Y4tInAAAAEs"]
[Sun Sep 06 09:30:16.070135 2026] [:error] [pid 9583:tid 140134322210560] [client 35.238.146.122:54254] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php.save"] [unique_id "ap14-PhF6tTT-2YP-moSAwAAARQ"]
[Sun Sep 06 09:30:16.680789 2026] [:error] [pid 9497:tid 140134330603264] [client 35.238.146.122:54268] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/staging/phpinfo.php"] [unique_id "ap14-DN1K9zF5GGDr7YJNQAAANM"]
[Sun Sep 06 09:30:17.260169 2026] [:error] [pid 9583:tid 140134364174080] [client 35.238.146.122:54276] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/beta/phpinfo.php"] [unique_id "ap14-fhF6tTT-2YP-moSBAAAAQ8"]
[Sun Sep 06 09:30:17.807930 2026] [:error] [pid 9498:tid 140134538163968] [client 35.238.146.122:54278] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/uat/phpinfo.php"] [unique_id "ap14-U85o6C7WMFTapP14wAAAAM"]
[Sun Sep 06 09:30:18.386476 2026] [:error] [pid 9583:tid 140134546556672] [client 35.238.146.122:54294] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/qa/phpinfo.php"] [unique_id "ap14-vhF6tTT-2YP-moSBwAAAQI"]
[Sun Sep 06 09:30:18.982157 2026] [:error] [pid 23146:tid 140134322210560] [client 35.238.146.122:54306] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/preview/phpinfo.php"] [unique_id "ap14-o2k0yzxcd_3Y4tInwAAAFQ"]
[Sun Sep 06 09:30:19.552244 2026] [:error] [pid 9498:tid 140134546556672] [client 35.238.146.122:54314] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/www/phpinfo.php"] [unique_id "ap14-085o6C7WMFTapP15AAAAAI"]
[Sun Sep 06 09:30:20.207186 2026] [:error] [pid 23146:tid 140134389352192] [client 35.238.146.122:54320] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/htdocs/phpinfo.php"] [unique_id "ap14_I2k0yzxcd_3Y4tIoAAAAEw"]
[Sun Sep 06 09:30:20.811139 2026] [:error] [pid 23146:tid 140134538163968] [client 35.238.146.122:54328] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/public_html/phpinfo.php"] [unique_id "ap14_I2k0yzxcd_3Y4tIoQAAAEM"]
[Sun Sep 06 09:30:21.427326 2026] [:error] [pid 9583:tid 140134305425152] [client 35.238.146.122:54342] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/site/phpinfo.php"] [unique_id "ap14_fhF6tTT-2YP-moSDAAAARY"]
[Sun Sep 06 09:30:22.018744 2026] [:error] [pid 23146:tid 140134313817856] [client 35.238.146.122:54354] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/docs/phpinfo.php"] [unique_id "ap14_o2k0yzxcd_3Y4tIowAAAFU"]
[Sun Sep 06 09:30:22.619049 2026] [:error] [pid 9583:tid 140134322210560] [client 35.238.146.122:54356] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "ap14_vhF6tTT-2YP-moSDwAAARQ"]
[Sun Sep 06 09:30:23.173779 2026] [:error] [pid 23146:tid 140134288639744] [client 35.238.146.122:54364] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/administrator/phpinfo.php"] [unique_id "ap14_42k0yzxcd_3Y4tIpwAAAFg"]
[Sun Sep 06 09:30:23.776538 2026] [:error] [pid 9583:tid 140134422923008] [client 35.238.146.122:54370] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/core/phpinfo.php"] [unique_id "ap14__hF6tTT-2YP-moSEQAAAQg"]
[Sun Sep 06 09:30:24.356691 2026] [:error] [pid 9497:tid 140134414530304] [client 35.238.146.122:54378] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/includes/phpinfo.php"] [unique_id "ap15ADN1K9zF5GGDr7YJOQAAAMk"]
[Sun Sep 06 09:30:24.997320 2026] [:error] [pid 9583:tid 140134414530304] [client 35.238.146.122:54394] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/service-account.json"] [unique_id "ap15APhF6tTT-2YP-moSFwAAAQk"]
[Sun Sep 06 09:30:25.588599 2026] [:error] [pid 9583:tid 140134380959488] [client 35.238.146.122:57844] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sa.json"] [unique_id "ap15AfhF6tTT-2YP-moSGQAAAQ0"]
[Sun Sep 06 09:30:26.127507 2026] [:error] [pid 23146:tid 140134297032448] [client 35.238.146.122:57860] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gcp-key.json"] [unique_id "ap15Ao2k0yzxcd_3Y4tIsAAAAFc"]
[Sun Sep 06 09:30:26.709401 2026] [:error] [pid 9497:tid 140134389352192] [client 35.238.146.122:57866] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gcp-credentials.json"] [unique_id "ap15AjN1K9zF5GGDr7YJPQAAAMw"]
[Sun Sep 06 09:30:27.241415 2026] [:error] [pid 23146:tid 140134347388672] [client 35.238.146.122:57870] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gcp-sa.json"] [unique_id "ap15A42k0yzxcd_3Y4tIsgAAAFE"]
[Sun Sep 06 09:30:27.787240 2026] [:error] [pid 23146:tid 140134397744896] [client 35.238.146.122:57884] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/credentials.json"] [unique_id "ap15A42k0yzxcd_3Y4tIswAAAEs"]
[Sun Sep 06 09:30:28.364091 2026] [:error] [pid 9583:tid 140134397744896] [client 35.238.146.122:57886] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/google-credentials.json"] [unique_id "ap15BPhF6tTT-2YP-moSHgAAAQs"]
[Sun Sep 06 09:30:28.999572 2026] [:error] [pid 9583:tid 140134305425152] [client 35.238.146.122:57894] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/google-key.json"] [unique_id "ap15BPhF6tTT-2YP-moSHwAAARY"]
[Sun Sep 06 09:30:29.568510 2026] [:error] [pid 9498:tid 140134563342080] [client 35.238.146.122:57898] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/.config/gcloud/application_default_credentials.json"] [unique_id "ap15BU85o6C7WMFTapP16AAAAAA"]
[Sun Sep 06 09:30:30.153973 2026] [:error] [pid 9498:tid 140134330603264] [client 35.238.146.122:57904] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/application_default_credentials.json"] [unique_id "ap15Bk85o6C7WMFTapP16gAAABM"]
[Sun Sep 06 09:30:30.711787 2026] [:error] [pid 9583:tid 140134448101120] [client 35.238.146.122:57908] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/key.json"] [unique_id "ap15BvhF6tTT-2YP-moSJgAAAQU"]
[Sun Sep 06 09:30:31.348424 2026] [:error] [pid 9496:tid 140134389352192] [client 35.238.146.122:57916] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/keyfile.json"] [unique_id "ap15B1p2h8ZYqaIyuoe3IgAAAIw"]
[Sun Sep 06 09:30:31.936359 2026] [:error] [pid 9583:tid 140134297032448] [client 35.238.146.122:57928] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/firebase-adminsdk.json"] [unique_id "ap15B_hF6tTT-2YP-moSJwAAARc"]
[Sun Sep 06 09:30:32.483556 2026] [:error] [pid 23146:tid 140134563342080] [client 35.238.146.122:57936] [client 35.238.146.122] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/firebase-key.json"] [unique_id "ap15CI2k0yzxcd_3Y4tItQAAAEA"]
[Sun Sep 06 10:41:26.473355 2026] [:error] [pid 9496:tid 140134414530304] [client 43.173.1.57:33952] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "ap2Jplp2h8ZYqaIyuofKPAAAAIk"]
[Sun Sep 06 11:34:02.673781 2026] [:error] [pid 23146:tid 140134554949376] [client 43.163.86.65:60280] [client 43.163.86.65] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "ap2V-o2k0yzxcd_3Y4tftwAAAEE"]
[Sun Sep 06 13:26:39.698267 2026] [:error] [pid 23537:tid 140711080998656] [client 192.144.148.122:48632] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "ap2wXxoDFJALYxXq6s0kJAAAAMo"]
[Sun Sep 06 15:49:17.405337 2026] [:error] [pid 23450:tid 140711209031424] [client 69.176.89.147:35869] [client 69.176.89.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "ap3RzZYh2hMCcoNUiXBt3wAAAEM"]
[Sun Sep 06 17:03:03.194776 2026] [:error] [pid 23720:tid 140711013857024] [client 104.28.254.46:34956] [client 104.28.254.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.save"] [unique_id "ap3jF-xVGD-6vo_HLH5u-gAAARI"], referer: https://www.google.com/search?q=pesema.com
[Sun Sep 06 17:03:03.205549 2026] [:error] [pid 23537:tid 140711217424128] [client 104.28.222.46:31471] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.bak"] [unique_id "ap3jFxoDFJALYxXq6s1gsQAAAMI"]
[Sun Sep 06 17:03:03.208683 2026] [:error] [pid 23720:tid 140711209031424] [client 104.28.222.47:39460] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env"] [unique_id "ap3jF-xVGD-6vo_HLH5u_AAAAQM"], referer: https://www.google.com/search?q=pesema.com
[Sun Sep 06 17:03:03.209055 2026] [:error] [pid 23537:tid 140710963500800] [client 104.28.222.46:57086] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/config"] [unique_id "ap3jFxoDFJALYxXq6s1gsgAAANg"], referer: https://www.google.com/search?q=pesema.com
[Sun Sep 06 17:03:03.220022 2026] [:error] [pid 23537:tid 140711097784064] [client 104.28.222.46:14971] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.test"] [unique_id "ap3jFxoDFJALYxXq6s1gswAAAMg"], referer: https://www.google.com/search?q=pesema.com
[Sun Sep 06 17:03:03.220543 2026] [:error] [pid 23537:tid 140711055820544] [client 104.28.222.47:25520] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.backup"] [unique_id "ap3jFxoDFJALYxXq6s1gtAAAAM0"]
[Sun Sep 06 17:03:03.236835 2026] [:error] [pid 23537:tid 140711192246016] [client 104.28.222.47:44334] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.sample"] [unique_id "ap3jFxoDFJALYxXq6s1gtgAAAMU"]
[Sun Sep 06 17:03:03.237677 2026] [:error] [pid 23449:tid 140710988678912] [client 104.28.222.47:60662] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.dist"] [unique_id "ap3jF2i7nVbCqCpvpuu6FgAAABU"], referer: https://www.google.com/search?q=pesema.com
[Sun Sep 06 17:03:03.238563 2026] [:error] [pid 23537:tid 140711200638720] [client 104.28.222.46:40401] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.production"] [unique_id "ap3jFxoDFJALYxXq6s1gtwAAAMQ"]
[Sun Sep 06 17:03:03.241442 2026] [:error] [pid 23451:tid 140710963500800] [client 104.28.222.47:9688] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wp-config.php"] [unique_id "ap3jF2H227LtxadBWvOWRgAAAJg"], referer: https://www.google.com/search?q=pesema.com
[Sun Sep 06 17:03:03.242268 2026] [:error] [pid 23451:tid 140711097784064] [client 104.28.222.47:49340] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.local"] [unique_id "ap3jF2H227LtxadBWvOWRwAAAIg"], referer: https://www.google.com/search?q=pesema.com
[Sun Sep 06 17:03:03.244326 2026] [:error] [pid 23537:tid 140711080998656] [client 104.28.222.46:57083] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.git/HEAD"] [unique_id "ap3jFxoDFJALYxXq6s1guAAAAMo"], referer: https://www.google.com/search?q=pesema.com
[Sun Sep 06 17:03:03.255215 2026] [:error] [pid 23720:tid 140711217424128] [client 104.28.222.47:42961] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.old"] [unique_id "ap3jF-xVGD-6vo_HLH5u_gAAAQI"]
[Sun Sep 06 17:03:03.287733 2026] [:error] [pid 23450:tid 140710980286208] [client 104.28.254.46:33152] [client 104.28.254.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/wp-config.php.bak"] [unique_id "ap3jF5Yh2hMCcoNUiXB4KQAAAFY"], referer: https://www.google.com/search?q=pesema.com
[Sun Sep 06 17:03:03.899458 2026] [:error] [pid 23451:tid 140711047427840] [client 104.28.254.46:19430] [client 104.28.254.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.production.local"] [unique_id "ap3jF2H227LtxadBWvOWSQAAAI4"], referer: https://www.google.com/search?q=pesema.com
[Sun Sep 06 17:03:03.922656 2026] [:error] [pid 23720:tid 140711047427840] [client 104.28.254.46:16524] [client 104.28.254.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pesema.com"] [uri "/.env.development.local"] [unique_id "ap3jF-xVGD-6vo_HLH5vAAAAAQ4"], referer: https://www.google.com/search?q=pesema.com
[Sun Sep 06 17:03:49.556264 2026] [autoindex:error] [pid 23449:tid 140711080998656] [client 159.65.138.30:59704] AH01276: Cannot serve directory /home/pesema/public_html/admin/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://charlot-tesun6193.michael65eagle.workers.dev/proxy?modify&proxyUrl=https%3A%2F%2Fpesema.com%2Fadmin
[Sun Sep 06 17:28:54.906084 2026] [:error] [pid 23449:tid 140711106176768] [client 43.130.154.56:55070] [client 43.130.154.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "ap3pJmi7nVbCqCpvpuu9bwAAAAc"]
[Sun Sep 06 18:30:20.284299 2026] [:error] [pid 16008:tid 140711225816832] [client 124.156.225.181:58358] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "ap33jLIsH66sGUHG2NNKqQAAAYE"]
[Sun Sep 06 18:39:08.371770 2026] [:error] [pid 9772:tid 140711097784064] [client 175.27.136.83:52658] [client 175.27.136.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "ap35nKdRhkOgzF_PKkia4AAAAUg"]
[Sun Sep 06 20:56:11.783594 2026] [:error] [pid 23537:tid 140710980286208] [client 35.236.58.47:47002] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "ap4ZuxoDFJALYxXq6s2LwgAAANY"]
[Sun Sep 06 20:56:13.803696 2026] [:error] [pid 23450:tid 140711192246016] [client 35.236.58.47:47018] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env"] [unique_id "ap4ZvZYh2hMCcoNUiXCcsAAAAEU"]
[Sun Sep 06 20:56:14.741854 2026] [:error] [pid 23451:tid 140711022249728] [client 35.236.58.47:47034] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.local"] [unique_id "ap4ZvmH227LtxadBWvPDUAAAAJE"]
[Sun Sep 06 20:56:15.634250 2026] [:error] [pid 23449:tid 140711192246016] [client 35.236.58.47:47048] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.production"] [unique_id "ap4Zv2i7nVbCqCpvpuvTTAAAAAU"]
[Sun Sep 06 20:56:16.572912 2026] [:error] [pid 23451:tid 140710980286208] [client 35.236.58.47:53124] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.staging"] [unique_id "ap4ZwGH227LtxadBWvPDUQAAAJY"]
[Sun Sep 06 20:56:17.618948 2026] [:error] [pid 23537:tid 140710963500800] [client 35.236.58.47:53134] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.development"] [unique_id "ap4ZwRoDFJALYxXq6s2LxwAAANg"]
[Sun Sep 06 20:56:18.751953 2026] [:error] [pid 23450:tid 140710963500800] [client 35.236.58.47:53138] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.test"] [unique_id "ap4ZwpYh2hMCcoNUiXCcswAAAFg"]
[Sun Sep 06 20:56:19.675776 2026] [:error] [pid 23720:tid 140711209031424] [client 35.236.58.47:53140] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.remote"] [unique_id "ap4Zw-xVGD-6vo_HLH6f7gAAAQM"]
[Sun Sep 06 20:56:20.821723 2026] [:error] [pid 23451:tid 140711064213248] [client 35.236.58.47:53148] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.bak"] [unique_id "ap4ZxGH227LtxadBWvPDUwAAAIw"]
[Sun Sep 06 20:56:21.791479 2026] [:error] [pid 16008:tid 140711072605952] [client 35.236.58.47:53154] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup"] [unique_id "ap4ZxbIsH66sGUHG2NNfIAAAAYs"]
[Sun Sep 06 20:56:23.489046 2026] [:error] [pid 23451:tid 140710971893504] [client 35.236.58.47:53156] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.save"] [unique_id "ap4Zx2H227LtxadBWvPDWAAAAJc"]
[Sun Sep 06 20:56:24.504286 2026] [:error] [pid 23720:tid 140711106176768] [client 35.236.58.47:53164] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.old"] [unique_id "ap4ZyOxVGD-6vo_HLH6f9gAAAQc"]
[Sun Sep 06 20:56:25.517417 2026] [:error] [pid 16008:tid 140711005464320] [client 35.236.58.47:53178] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.sample"] [unique_id "ap4ZybIsH66sGUHG2NNfJQAAAZM"]
[Sun Sep 06 20:56:26.363905 2026] [:error] [pid 23537:tid 140711114569472] [client 35.236.58.47:38580] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.example"] [unique_id "ap4ZyhoDFJALYxXq6s2L0wAAAMY"]
[Sun Sep 06 20:56:27.380750 2026] [:error] [pid 23720:tid 140711064213248] [client 35.236.58.47:38588] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dev"] [unique_id "ap4Zy-xVGD-6vo_HLH6f9wAAAQw"]
[Sun Sep 06 20:56:28.470697 2026] [:error] [pid 23537:tid 140711225816832] [client 35.236.58.47:38590] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.prod"] [unique_id "ap4ZzBoDFJALYxXq6s2L1gAAAME"]
[Sun Sep 06 20:56:29.408016 2026] [:error] [pid 16008:tid 140710971893504] [client 35.236.58.47:38596] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.stage"] [unique_id "ap4ZzbIsH66sGUHG2NNfLgAAAZc"]
[Sun Sep 06 20:56:30.363969 2026] [:error] [pid 9772:tid 140711080998656] [client 35.236.58.47:38600] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.ci"] [unique_id "ap4ZzqdRhkOgzF_PKkiwXwAAAUo"]
[Sun Sep 06 20:56:31.331478 2026] [:error] [pid 23451:tid 140711200638720] [client 35.236.58.47:38610] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.docker"] [unique_id "ap4Zz2H227LtxadBWvPDYAAAAIQ"]
[Sun Sep 06 20:56:32.233499 2026] [:error] [pid 23720:tid 140710971893504] [client 35.236.58.47:38614] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.live"] [unique_id "ap4Z0OxVGD-6vo_HLH6f_QAAARc"]
[Sun Sep 06 20:56:33.273594 2026] [:error] [pid 23450:tid 140710997071616] [client 35.236.58.47:38630] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.preprod"] [unique_id "ap4Z0ZYh2hMCcoNUiXCcvQAAAFQ"]
[Sun Sep 06 20:56:34.239857 2026] [:error] [pid 23449:tid 140711064213248] [client 35.236.58.47:38642] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.uat"] [unique_id "ap4Z0mi7nVbCqCpvpuvTWwAAAAw"]
[Sun Sep 06 20:56:35.167093 2026] [:error] [pid 23537:tid 140711005464320] [client 35.236.58.47:38644] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dist"] [unique_id "ap4Z0xoDFJALYxXq6s2L3AAAANM"]
[Sun Sep 06 20:56:36.344990 2026] [:error] [pid 9772:tid 140711039035136] [client 35.236.58.47:57676] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.swp"] [unique_id "ap4Z1KdRhkOgzF_PKkiwYwAAAU8"]
[Sun Sep 06 20:56:37.357847 2026] [:error] [pid 23451:tid 140710971893504] [client 35.236.58.47:57686] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env~"] [unique_id "ap4Z1WH227LtxadBWvPDZgAAAJc"]
[Sun Sep 06 20:56:38.366517 2026] [:error] [pid 23450:tid 140711097784064] [client 35.236.58.47:57702] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env1"] [unique_id "ap4Z1pYh2hMCcoNUiXCcxQAAAEg"]
[Sun Sep 06 20:56:39.272710 2026] [:error] [pid 23451:tid 140711209031424] [client 35.236.58.47:57710] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env2"] [unique_id "ap4Z12H227LtxadBWvPDaQAAAIM"]
[Sun Sep 06 20:56:40.171487 2026] [:error] [pid 16008:tid 140711072605952] [client 35.236.58.47:57716] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env_copy"] [unique_id "ap4Z2LIsH66sGUHG2NNfPgAAAYs"]
[Sun Sep 06 20:56:40.992401 2026] [:error] [pid 23451:tid 140711097784064] [client 35.236.58.47:57718] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.txt"] [unique_id "ap4Z2GH227LtxadBWvPDagAAAIg"]
[Sun Sep 06 20:56:41.924520 2026] [:error] [pid 18776:tid 140710997071616] [client 35.236.58.47:57732] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.json"] [unique_id "ap4Z2QDwOIgJaZ-zFcwhZQAAAdQ"]
[Sun Sep 06 20:56:42.894582 2026] [:error] [pid 16008:tid 140711234209536] [client 35.236.58.47:57734] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.yaml"] [unique_id "ap4Z2rIsH66sGUHG2NNfQgAAAYA"]
[Sun Sep 06 20:56:44.636029 2026] [:error] [pid 23450:tid 140711234209536] [client 35.236.58.47:57750] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.yml"] [unique_id "ap4Z3JYh2hMCcoNUiXCczAAAAEA"]
[Sun Sep 06 20:56:45.547839 2026] [:error] [pid 16008:tid 140711089391360] [client 35.236.58.47:57756] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/app/.env"] [unique_id "ap4Z3bIsH66sGUHG2NNfRAAAAYk"]
[Sun Sep 06 20:56:46.356856 2026] [:error] [pid 23451:tid 140711055820544] [client 35.236.58.47:58850] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/apps/.env"] [unique_id "ap4Z3mH227LtxadBWvPDbgAAAI0"]
[Sun Sep 06 20:56:47.160819 2026] [:error] [pid 23450:tid 140711022249728] [client 35.236.58.47:58860] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/.env"] [unique_id "ap4Z35Yh2hMCcoNUiXCczgAAAFE"]
[Sun Sep 06 20:56:47.971255 2026] [:error] [pid 16008:tid 140710971893504] [client 35.236.58.47:58866] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/web/.env"] [unique_id "ap4Z37IsH66sGUHG2NNfUwAAAZc"]
[Sun Sep 06 20:56:48.889175 2026] [:error] [pid 16008:tid 140710963500800] [client 35.236.58.47:58882] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/site/.env"] [unique_id "ap4Z4LIsH66sGUHG2NNfVwAAAZg"]
[Sun Sep 06 20:56:49.732749 2026] [:error] [pid 16008:tid 140711080998656] [client 35.236.58.47:58892] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/public/.env"] [unique_id "ap4Z4bIsH66sGUHG2NNfWwAAAYo"]
[Sun Sep 06 20:56:50.626018 2026] [:error] [pid 23451:tid 140711047427840] [client 35.236.58.47:58900] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin/.env"] [unique_id "ap4Z4mH227LtxadBWvPDcQAAAI4"]
[Sun Sep 06 20:56:51.465109 2026] [:error] [pid 23537:tid 140711106176768] [client 35.236.58.47:58902] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backend/.env"] [unique_id "ap4Z4xoDFJALYxXq6s2L5gAAAMc"]
[Sun Sep 06 20:56:52.369815 2026] [:error] [pid 16008:tid 140711225816832] [client 35.236.58.47:58916] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/server/.env"] [unique_id "ap4Z5LIsH66sGUHG2NNfZQAAAYE"]
[Sun Sep 06 20:56:53.231465 2026] [:error] [pid 16008:tid 140710963500800] [client 35.236.58.47:58926] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/frontend/.env"] [unique_id "ap4Z5bIsH66sGUHG2NNfaAAAAZg"]
[Sun Sep 06 20:56:54.208875 2026] [:error] [pid 23720:tid 140710980286208] [client 35.236.58.47:58942] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/src/.env"] [unique_id "ap4Z5uxVGD-6vo_HLH6gIwAAARY"]
[Sun Sep 06 20:56:55.388561 2026] [:error] [pid 23720:tid 140711005464320] [client 35.236.58.47:58954] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/core/.env"] [unique_id "ap4Z5-xVGD-6vo_HLH6gKgAAARM"]
[Sun Sep 06 20:56:56.257230 2026] [:error] [pid 23451:tid 140710997071616] [client 35.236.58.47:60444] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/core/app/.env"] [unique_id "ap4Z6GH227LtxadBWvPDegAAAJQ"]
[Sun Sep 06 20:56:57.171106 2026] [:error] [pid 23720:tid 140710971893504] [client 35.236.58.47:60452] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/config/.env"] [unique_id "ap4Z6exVGD-6vo_HLH6gLgAAARc"]
[Sun Sep 06 20:56:58.182613 2026] [:error] [pid 16008:tid 140711047427840] [client 35.236.58.47:60460] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/private/.env"] [unique_id "ap4Z6rIsH66sGUHG2NNffgAAAY4"]
[Sun Sep 06 20:56:59.075773 2026] [:error] [pid 23450:tid 140711200638720] [client 35.236.58.47:60466] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/application/.env"] [unique_id "ap4Z65Yh2hMCcoNUiXCc3gAAAEQ"]
[Sun Sep 06 20:57:00.109282 2026] [:error] [pid 9772:tid 140711005464320] [client 35.236.58.47:60480] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/bootstrap/.env"] [unique_id "ap4Z7KdRhkOgzF_PKkiwegAAAVM"]
[Sun Sep 06 20:57:01.602758 2026] [:error] [pid 23720:tid 140711064213248] [client 35.236.58.47:60492] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/database/.env"] [unique_id "ap4Z7exVGD-6vo_HLH6gPgAAAQw"]
[Sun Sep 06 20:57:02.496531 2026] [:error] [pid 16008:tid 140711192246016] [client 35.236.58.47:60500] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/storage/.env"] [unique_id "ap4Z7rIsH66sGUHG2NNfhQAAAYU"]
[Sun Sep 06 20:57:03.305432 2026] [:error] [pid 23450:tid 140711030642432] [client 35.236.58.47:60502] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/var/www/.env"] [unique_id "ap4Z75Yh2hMCcoNUiXCc4wAAAFA"]
[Sun Sep 06 20:57:04.063509 2026] [:error] [pid 16008:tid 140710997071616] [client 35.236.58.47:60510] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/var/www/html/.env"] [unique_id "ap4Z8LIsH66sGUHG2NNfjgAAAZQ"]
[Sun Sep 06 20:57:04.891724 2026] [:error] [pid 23450:tid 140711039035136] [client 35.236.58.47:60520] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/current/.env"] [unique_id "ap4Z8JYh2hMCcoNUiXCc5wAAAE8"]
[Sun Sep 06 20:57:05.746736 2026] [:error] [pid 23537:tid 140711209031424] [client 35.236.58.47:44974] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/release/.env"] [unique_id "ap4Z8RoDFJALYxXq6s2L-wAAAMM"]
[Sun Sep 06 20:57:06.579265 2026] [:error] [pid 23451:tid 140711217424128] [client 35.236.58.47:44990] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/releases/.env"] [unique_id "ap4Z8mH227LtxadBWvPDjQAAAII"]
[Sun Sep 06 20:57:07.530517 2026] [:error] [pid 9772:tid 140711013857024] [client 35.236.58.47:45006] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/shared/.env"] [unique_id "ap4Z86dRhkOgzF_PKkiwfgAAAVI"]
[Sun Sep 06 20:57:08.421758 2026] [:error] [pid 23449:tid 140711097784064] [client 35.236.58.47:45022] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/deploy/.env"] [unique_id "ap4Z9Gi7nVbCqCpvpuvTiQAAAAg"]
[Sun Sep 06 20:57:09.306794 2026] [:error] [pid 23537:tid 140711217424128] [client 35.236.58.47:45030] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/build/.env"] [unique_id "ap4Z9RoDFJALYxXq6s2MAQAAAMI"]
[Sun Sep 06 20:57:10.264576 2026] [:error] [pid 16008:tid 140711225816832] [client 35.236.58.47:45032] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dist/.env"] [unique_id "ap4Z9rIsH66sGUHG2NNfqAAAAYE"]
[Sun Sep 06 20:57:11.131461 2026] [:error] [pid 23450:tid 140710988678912] [client 35.236.58.47:45042] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/public_html/.env"] [unique_id "ap4Z95Yh2hMCcoNUiXCc9QAAAFU"]
[Sun Sep 06 20:57:11.945561 2026] [:error] [pid 23449:tid 140711217424128] [client 35.236.58.47:45050] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/htdocs/.env"] [unique_id "ap4Z92i7nVbCqCpvpuvTjwAAAAI"]
[Sun Sep 06 20:57:12.760285 2026] [:error] [pid 16008:tid 140711209031424] [client 35.236.58.47:45056] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/www/.env"] [unique_id "ap4Z-LIsH66sGUHG2NNfrAAAAYM"]
[Sun Sep 06 20:57:13.640142 2026] [:error] [pid 23451:tid 140711039035136] [client 35.236.58.47:45066] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/html/.env"] [unique_id "ap4Z-WH227LtxadBWvPDlAAAAI8"]
[Sun Sep 06 20:57:14.564618 2026] [:error] [pid 16008:tid 140710971893504] [client 35.236.58.47:45072] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/live/.env"] [unique_id "ap4Z-rIsH66sGUHG2NNfsgAAAZc"]
[Sun Sep 06 20:57:15.493044 2026] [:error] [pid 23720:tid 140711234209536] [client 35.236.58.47:45080] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/prod/.env"] [unique_id "ap4Z--xVGD-6vo_HLH6gXQAAAQA"]
[Sun Sep 06 20:57:16.531272 2026] [:error] [pid 16008:tid 140710988678912] [client 35.236.58.47:48582] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dev/.env"] [unique_id "ap4Z_LIsH66sGUHG2NNftQAAAZU"]
[Sun Sep 06 20:57:17.433560 2026] [:error] [pid 16008:tid 140711022249728] [client 35.236.58.47:48596] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/staging/.env"] [unique_id "ap4Z_bIsH66sGUHG2NNfuAAAAZE"]
[Sun Sep 06 20:57:18.216936 2026] [:error] [pid 16008:tid 140710980286208] [client 35.236.58.47:48608] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/opt/.env"] [unique_id "ap4Z_rIsH66sGUHG2NNfuQAAAZY"]
[Sun Sep 06 20:57:19.123548 2026] [:error] [pid 16008:tid 140711209031424] [client 35.236.58.47:48616] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/laravel/.env"] [unique_id "ap4Z_7IsH66sGUHG2NNfvAAAAYM"]
[Sun Sep 06 20:57:20.715105 2026] [:error] [pid 16008:tid 140711013857024] [client 35.236.58.47:48628] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/symfony/.env"] [unique_id "ap4aALIsH66sGUHG2NNfvwAAAZI"]
[Sun Sep 06 20:57:21.616407 2026] [:error] [pid 23537:tid 140711200638720] [client 35.236.58.47:48638] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wordpress/.env"] [unique_id "ap4aARoDFJALYxXq6s2MCwAAAMQ"]
[Sun Sep 06 20:57:22.591976 2026] [:error] [pid 16008:tid 140711234209536] [client 35.236.58.47:48654] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp/.env"] [unique_id "ap4aArIsH66sGUHG2NNfxQAAAYA"]
[Sun Sep 06 20:57:23.366870 2026] [:error] [pid 23720:tid 140710963500800] [client 35.236.58.47:48670] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cms/.env"] [unique_id "ap4aA-xVGD-6vo_HLH6gZgAAARg"]
[Sun Sep 06 20:57:24.342393 2026] [:error] [pid 23720:tid 140710997071616] [client 35.236.58.47:48684] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/drupal/.env"] [unique_id "ap4aBOxVGD-6vo_HLH6gaAAAARQ"]
[Sun Sep 06 20:57:25.539266 2026] [:error] [pid 23537:tid 140711106176768] [client 35.236.58.47:48692] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/joomla/.env"] [unique_id "ap4aBRoDFJALYxXq6s2MEgAAAMc"]
[Sun Sep 06 20:57:26.421343 2026] [:error] [pid 9772:tid 140711234209536] [client 35.236.58.47:60510] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/magento/.env"] [unique_id "ap4aBqdRhkOgzF_PKkiwjgAAAUA"]
[Sun Sep 06 20:57:27.373422 2026] [:error] [pid 23449:tid 140711022249728] [client 35.236.58.47:60520] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/shopify/.env"] [unique_id "ap4aB2i7nVbCqCpvpuvTmwAAABE"]
[Sun Sep 06 20:57:28.351718 2026] [:error] [pid 16008:tid 140711089391360] [client 35.236.58.47:60524] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/prestashop/.env"] [unique_id "ap4aCLIsH66sGUHG2NNfygAAAYk"]
[Sun Sep 06 20:57:29.420751 2026] [:error] [pid 9772:tid 140711039035136] [client 35.236.58.47:60534] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/codeigniter/.env"] [unique_id "ap4aCadRhkOgzF_PKkiwkgAAAU8"]
[Sun Sep 06 20:57:30.473466 2026] [:error] [pid 23537:tid 140711200638720] [client 35.236.58.47:60544] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cakephp/.env"] [unique_id "ap4aChoDFJALYxXq6s2MFAAAAMQ"]
[Sun Sep 06 20:57:31.555088 2026] [:error] [pid 23537:tid 140711030642432] [client 35.236.58.47:60546] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/zend/.env"] [unique_id "ap4aCxoDFJALYxXq6s2MFwAAANA"]
[Sun Sep 06 20:57:32.555795 2026] [:error] [pid 16008:tid 140711047427840] [client 35.236.58.47:60552] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/yii/.env"] [unique_id "ap4aDLIsH66sGUHG2NNfzAAAAY4"]
[Sun Sep 06 20:57:33.599698 2026] [:error] [pid 9772:tid 140711080998656] [client 35.236.58.47:60562] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/laravel5/.env"] [unique_id "ap4aDadRhkOgzF_PKkiwmgAAAUo"]
[Sun Sep 06 20:57:34.555791 2026] [:error] [pid 18776:tid 140710988678912] [client 35.236.58.47:60576] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v1/.env"] [unique_id "ap4aDgDwOIgJaZ-zFcwhnAAAAdU"]
[Sun Sep 06 20:57:35.499869 2026] [:error] [pid 23537:tid 140711200638720] [client 35.236.58.47:60588] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v2/.env"] [unique_id "ap4aDxoDFJALYxXq6s2MIQAAAMQ"]
[Sun Sep 06 20:57:36.368574 2026] [:error] [pid 18776:tid 140711030642432] [client 35.236.58.47:59814] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/v3/.env"] [unique_id "ap4aEADwOIgJaZ-zFcwhoQAAAdA"]
[Sun Sep 06 20:57:37.349762 2026] [:error] [pid 23537:tid 140711005464320] [client 35.236.58.47:59826] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/v1/.env"] [unique_id "ap4aERoDFJALYxXq6s2MIwAAANM"]
[Sun Sep 06 20:57:38.324835 2026] [:error] [pid 18776:tid 140711022249728] [client 35.236.58.47:59834] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/v2/.env"] [unique_id "ap4aEgDwOIgJaZ-zFcwhowAAAdE"]
[Sun Sep 06 20:57:39.292710 2026] [:error] [pid 23450:tid 140711055820544] [client 35.236.58.47:59846] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/rest/.env"] [unique_id "ap4aE5Yh2hMCcoNUiXCdEAAAAE0"]
[Sun Sep 06 20:57:40.167520 2026] [:error] [pid 16008:tid 140711106176768] [client 35.236.58.47:59860] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/graphql/.env"] [unique_id "ap4aFLIsH66sGUHG2NNfzwAAAYc"]
[Sun Sep 06 20:57:41.735403 2026] [:error] [pid 23450:tid 140710997071616] [client 35.236.58.47:59868] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/gateway/.env"] [unique_id "ap4aFZYh2hMCcoNUiXCdFQAAAFQ"]
[Sun Sep 06 20:57:42.774426 2026] [:error] [pid 23450:tid 140711200638720] [client 35.236.58.47:59874] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/microservice/.env"] [unique_id "ap4aFpYh2hMCcoNUiXCdFgAAAEQ"]
[Sun Sep 06 20:57:43.702472 2026] [:error] [pid 23451:tid 140711225816832] [client 35.236.58.47:59880] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/service/.env"] [unique_id "ap4aF2H227LtxadBWvPDpwAAAIE"]
[Sun Sep 06 20:57:44.597879 2026] [:error] [pid 23451:tid 140711234209536] [client 35.236.58.47:59886] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/v3/.env"] [unique_id "ap4aGGH227LtxadBWvPDqAAAAIA"]
[Sun Sep 06 20:57:45.494392 2026] [:error] [pid 23720:tid 140711089391360] [client 35.236.58.47:59888] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/dev/.env"] [unique_id "ap4aGexVGD-6vo_HLH6gcQAAAQk"]
[Sun Sep 06 20:57:46.317968 2026] [:error] [pid 23451:tid 140711039035136] [client 35.236.58.47:44880] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/api/staging/.env"] [unique_id "ap4aGmH227LtxadBWvPDqQAAAI8"]
[Sun Sep 06 20:57:47.226745 2026] [:error] [pid 23720:tid 140710997071616] [client 35.236.58.47:44888] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/vendor/.env"] [unique_id "ap4aG-xVGD-6vo_HLH6gcwAAARQ"]
[Sun Sep 06 20:57:48.064383 2026] [:error] [pid 23537:tid 140711234209536] [client 35.236.58.47:44896] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/lib/.env"] [unique_id "ap4aHBoDFJALYxXq6s2MOgAAAMA"]
[Sun Sep 06 20:57:48.982783 2026] [:error] [pid 23537:tid 140711005464320] [client 35.236.58.47:44900] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/resources/.env"] [unique_id "ap4aHBoDFJALYxXq6s2MPgAAANM"]
[Sun Sep 06 20:57:49.985758 2026] [:error] [pid 23450:tid 140711013857024] [client 35.236.58.47:44914] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/assets/.env"] [unique_id "ap4aHZYh2hMCcoNUiXCdIAAAAFI"]
[Sun Sep 06 20:57:51.009392 2026] [:error] [pid 23537:tid 140711064213248] [client 35.236.58.47:44922] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/uploads/.env"] [unique_id "ap4aHxoDFJALYxXq6s2MQgAAAMw"]
[Sun Sep 06 20:57:51.872721 2026] [:error] [pid 23450:tid 140710997071616] [client 35.236.58.47:44924] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/internal/.env"] [unique_id "ap4aH5Yh2hMCcoNUiXCdJQAAAFQ"]
[Sun Sep 06 20:57:52.769419 2026] [:error] [pid 23720:tid 140711089391360] [client 35.236.58.47:44940] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/tools/.env"] [unique_id "ap4aIOxVGD-6vo_HLH6gdwAAAQk"]
[Sun Sep 06 20:57:53.560415 2026] [:error] [pid 23537:tid 140711106176768] [client 35.236.58.47:44944] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/scripts/.env"] [unique_id "ap4aIRoDFJALYxXq6s2MSwAAAMc"]
[Sun Sep 06 20:57:54.388620 2026] [:error] [pid 23450:tid 140711013857024] [client 35.236.58.47:44956] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/bin/.env"] [unique_id "ap4aIpYh2hMCcoNUiXCdJwAAAFI"]
[Sun Sep 06 20:57:55.366366 2026] [:error] [pid 9772:tid 140711022249728] [client 35.236.58.47:44972] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sbin/.env"] [unique_id "ap4aI6dRhkOgzF_PKkiwpwAAAVE"]
[Sun Sep 06 20:57:56.148300 2026] [:error] [pid 23720:tid 140711005464320] [client 35.236.58.47:45946] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/local/.env"] [unique_id "ap4aJOxVGD-6vo_HLH6geQAAARM"]
[Sun Sep 06 20:57:56.888249 2026] [:error] [pid 18776:tid 140711005464320] [client 35.236.58.47:45962] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/portal/.env"] [unique_id "ap4aJADwOIgJaZ-zFcwhqwAAAdM"]
[Sun Sep 06 20:57:57.895972 2026] [:error] [pid 23537:tid 140710997071616] [client 35.236.58.47:45976] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/dashboard/.env"] [unique_id "ap4aJRoDFJALYxXq6s2MUAAAANQ"]
[Sun Sep 06 20:57:58.694531 2026] [:error] [pid 23537:tid 140711089391360] [client 35.236.58.47:45990] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/panel/.env"] [unique_id "ap4aJhoDFJALYxXq6s2MUgAAAMk"]
[Sun Sep 06 20:58:00.111544 2026] [:error] [pid 23450:tid 140710988678912] [client 35.236.58.47:46000] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/crm/.env"] [unique_id "ap4aKJYh2hMCcoNUiXCdKgAAAFU"]
[Sun Sep 06 20:58:01.039290 2026] [:error] [pid 23537:tid 140711072605952] [client 35.236.58.47:46006] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/erp/.env"] [unique_id "ap4aKRoDFJALYxXq6s2MVAAAAMs"]
[Sun Sep 06 20:58:01.830211 2026] [:error] [pid 23537:tid 140711217424128] [client 35.236.58.47:46014] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/shop/.env"] [unique_id "ap4aKRoDFJALYxXq6s2MVQAAAMI"]
[Sun Sep 06 20:58:02.692322 2026] [:error] [pid 23537:tid 140711097784064] [client 35.236.58.47:46016] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/store/.env"] [unique_id "ap4aKhoDFJALYxXq6s2MVwAAAMg"]
[Sun Sep 06 20:58:03.750324 2026] [:error] [pid 9772:tid 140711106176768] [client 35.236.58.47:46024] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/saas/.env"] [unique_id "ap4aK6dRhkOgzF_PKkiwqwAAAUc"]
[Sun Sep 06 20:58:04.486046 2026] [:error] [pid 23450:tid 140711114569472] [client 35.236.58.47:46032] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/client/.env"] [unique_id "ap4aLJYh2hMCcoNUiXCdLgAAAEY"]
[Sun Sep 06 20:58:05.407961 2026] [:error] [pid 18776:tid 140711192246016] [client 35.236.58.47:46042] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/project/.env"] [unique_id "ap4aLQDwOIgJaZ-zFcwhrQAAAcU"]
[Sun Sep 06 20:58:06.268451 2026] [:error] [pid 23451:tid 140711106176768] [client 35.236.58.47:45424] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/admin-panel/.env"] [unique_id "ap4aLmH227LtxadBWvPDtwAAAIc"]
[Sun Sep 06 20:58:07.127750 2026] [:error] [pid 23537:tid 140711039035136] [client 35.236.58.47:45434] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/control-panel/.env"] [unique_id "ap4aLxoDFJALYxXq6s2MYQAAAM8"]
[Sun Sep 06 20:58:08.134518 2026] [:error] [pid 23449:tid 140711022249728] [client 35.236.58.47:45450] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/user-panel/.env"] [unique_id "ap4aMGi7nVbCqCpvpuvTtAAAABE"]
[Sun Sep 06 20:58:08.983322 2026] [:error] [pid 23720:tid 140711047427840] [client 35.236.58.47:45452] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/node/.env"] [unique_id "ap4aMOxVGD-6vo_HLH6gfQAAAQ4"]
[Sun Sep 06 20:58:09.763507 2026] [:error] [pid 23537:tid 140711055820544] [client 35.236.58.47:45454] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/express/.env"] [unique_id "ap4aMRoDFJALYxXq6s2MZwAAAM0"]
[Sun Sep 06 20:58:10.688037 2026] [:error] [pid 9772:tid 140711072605952] [client 35.236.58.47:45460] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/next/.env"] [unique_id "ap4aMqdRhkOgzF_PKkiwsQAAAUs"]
[Sun Sep 06 20:58:11.755894 2026] [:error] [pid 23537:tid 140711217424128] [client 35.236.58.47:45476] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/nuxt/.env"] [unique_id "ap4aMxoDFJALYxXq6s2McQAAAMI"]
[Sun Sep 06 20:58:12.803300 2026] [:error] [pid 18776:tid 140711106176768] [client 35.236.58.47:45492] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/nest/.env"] [unique_id "ap4aNADwOIgJaZ-zFcwhswAAAcc"]
[Sun Sep 06 20:58:13.539952 2026] [:error] [pid 23450:tid 140711080998656] [client 35.236.58.47:45504] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/react/.env"] [unique_id "ap4aNZYh2hMCcoNUiXCdSgAAAEo"]
[Sun Sep 06 20:58:14.542706 2026] [:error] [pid 23537:tid 140711225816832] [client 35.236.58.47:45512] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/vue/.env"] [unique_id "ap4aNhoDFJALYxXq6s2MgAAAAME"]
[Sun Sep 06 20:58:15.580834 2026] [:error] [pid 9772:tid 140710997071616] [client 35.236.58.47:45514] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/angular/.env"] [unique_id "ap4aN6dRhkOgzF_PKkiwtAAAAVQ"]
[Sun Sep 06 20:58:16.369566 2026] [:error] [pid 23537:tid 140711022249728] [client 35.236.58.47:45686] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/svelte/.env"] [unique_id "ap4aOBoDFJALYxXq6s2MjAAAANE"]
[Sun Sep 06 20:58:17.369035 2026] [:error] [pid 23449:tid 140711097784064] [client 35.236.58.47:45688] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/vite/.env"] [unique_id "ap4aOWi7nVbCqCpvpuvTvAAAAAg"]
[Sun Sep 06 20:58:18.407471 2026] [:error] [pid 23720:tid 140711013857024] [client 35.236.58.47:45702] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backup/.env"] [unique_id "ap4aOuxVGD-6vo_HLH6ghAAAARI"]
[Sun Sep 06 20:58:20.135459 2026] [:error] [pid 9772:tid 140711114569472] [client 35.236.58.47:45710] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/backups/.env"] [unique_id "ap4aPKdRhkOgzF_PKkiwvAAAAUY"]
[Sun Sep 06 20:58:20.996041 2026] [:error] [pid 23537:tid 140711097784064] [client 35.236.58.47:45716] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/old/.env"] [unique_id "ap4aPBoDFJALYxXq6s2MoAAAAMg"]
[Sun Sep 06 20:58:21.886362 2026] [:error] [pid 23451:tid 140711200638720] [client 35.236.58.47:45732] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/tmp/.env"] [unique_id "ap4aPWH227LtxadBWvPD1wAAAIQ"]
[Sun Sep 06 20:58:22.883561 2026] [:error] [pid 23537:tid 140711097784064] [client 35.236.58.47:45746] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/temp/.env"] [unique_id "ap4aPhoDFJALYxXq6s2MpwAAAMg"]
[Sun Sep 06 20:58:23.793276 2026] [:error] [pid 23537:tid 140711072605952] [client 35.236.58.47:45760] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/lab/.env"] [unique_id "ap4aPxoDFJALYxXq6s2MrgAAAMs"]
[Sun Sep 06 20:58:24.698820 2026] [:error] [pid 23720:tid 140711114569472] [client 35.236.58.47:45770] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cronlab/.env"] [unique_id "ap4aQOxVGD-6vo_HLH6gkQAAAQY"]
[Sun Sep 06 20:58:25.573185 2026] [:error] [pid 23537:tid 140711072605952] [client 35.236.58.47:45786] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cron/.env"] [unique_id "ap4aQRoDFJALYxXq6s2MvgAAAMs"]
[Sun Sep 06 20:58:26.550564 2026] [:error] [pid 23537:tid 140710980286208] [client 35.236.58.47:54474] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/en/.env"] [unique_id "ap4aQhoDFJALYxXq6s2MxgAAANY"]
[Sun Sep 06 20:58:27.700553 2026] [:error] [pid 23720:tid 140711064213248] [client 35.236.58.47:54490] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/administrator/.env"] [unique_id "ap4aQ-xVGD-6vo_HLH6gnAAAAQw"]
[Sun Sep 06 20:58:28.636137 2026] [:error] [pid 16008:tid 140711225816832] [client 35.236.58.47:54502] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/psnlink/.env"] [unique_id "ap4aRLIsH66sGUHG2NNf8AAAAYE"]
[Sun Sep 06 20:58:29.568434 2026] [:error] [pid 23537:tid 140711225816832] [client 35.236.58.47:54508] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/exapi/.env"] [unique_id "ap4aRRoDFJALYxXq6s2M0AAAAME"]
[Sun Sep 06 20:58:30.607181 2026] [:error] [pid 9772:tid 140710971893504] [client 35.236.58.47:54524] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sitemaps/.env"] [unique_id "ap4aRqdRhkOgzF_PKkiw0gAAAVc"]
[Sun Sep 06 20:58:31.419600 2026] [:error] [pid 9772:tid 140711114569472] [client 35.236.58.47:54536] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup1"] [unique_id "ap4aR6dRhkOgzF_PKkiw1QAAAUY"]
[Sun Sep 06 20:58:32.513300 2026] [:error] [pid 23537:tid 140711097784064] [client 35.236.58.47:54542] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup2"] [unique_id "ap4aSBoDFJALYxXq6s2M4QAAAMg"]
[Sun Sep 06 20:58:33.300793 2026] [:error] [pid 23451:tid 140710971893504] [client 35.236.58.47:54556] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/logs/.env"] [unique_id "ap4aSWH227LtxadBWvPD8QAAAJc"]
[Sun Sep 06 20:58:34.304293 2026] [:error] [pid 18776:tid 140711234209536] [client 35.236.58.47:54564] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cache/.env"] [unique_id "ap4aSgDwOIgJaZ-zFcwh2QAAAcA"]
[Sun Sep 06 20:58:35.054862 2026] [:error] [pid 23537:tid 140711209031424] [client 35.236.58.47:54576] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailer/.env"] [unique_id "ap4aSxoDFJALYxXq6s2M9AAAAMM"]
[Sun Sep 06 20:58:36.051341 2026] [:error] [pid 23537:tid 140711234209536] [client 35.236.58.47:51644] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mail/.env"] [unique_id "ap4aTBoDFJALYxXq6s2NBQAAAMA"]
[Sun Sep 06 20:58:36.883834 2026] [:error] [pid 23451:tid 140711005464320] [client 35.236.58.47:51656] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/email/.env"] [unique_id "ap4aTGH227LtxadBWvPD-AAAAJM"]
[Sun Sep 06 20:58:38.575166 2026] [:error] [pid 23720:tid 140711005464320] [client 35.236.58.47:51662] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/smtp/.env"] [unique_id "ap4aTuxVGD-6vo_HLH6grwAAARM"]
[Sun Sep 06 20:58:39.612338 2026] [:error] [pid 23450:tid 140711047427840] [client 35.236.58.47:51674] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailing/.env"] [unique_id "ap4aT5Yh2hMCcoNUiXCdigAAAE4"]
[Sun Sep 06 20:58:40.416694 2026] [:error] [pid 9772:tid 140711005464320] [client 35.236.58.47:51676] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/notifications/.env"] [unique_id "ap4aUKdRhkOgzF_PKkiw6AAAAVM"]
[Sun Sep 06 20:58:41.263595 2026] [:error] [pid 23449:tid 140711030642432] [client 35.236.58.47:51680] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/notify/.env"] [unique_id "ap4aUWi7nVbCqCpvpuvT5AAAABA"]
[Sun Sep 06 20:58:42.115489 2026] [:error] [pid 23450:tid 140711030642432] [client 35.236.58.47:51682] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sender/.env"] [unique_id "ap4aUpYh2hMCcoNUiXCdjwAAAFA"]
[Sun Sep 06 20:58:42.968208 2026] [:error] [pid 23720:tid 140711106176768] [client 35.236.58.47:51686] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/campaign/.env"] [unique_id "ap4aUuxVGD-6vo_HLH6gswAAAQc"]
[Sun Sep 06 20:58:44.067442 2026] [:error] [pid 16008:tid 140711209031424] [client 35.236.58.47:51700] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/newsletter/.env"] [unique_id "ap4aVLIsH66sGUHG2NNgDQAAAYM"]
[Sun Sep 06 20:58:44.952171 2026] [:error] [pid 18776:tid 140711072605952] [client 35.236.58.47:51710] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/ses/.env"] [unique_id "ap4aVADwOIgJaZ-zFcwh6QAAAcs"]
[Sun Sep 06 20:58:45.750753 2026] [:error] [pid 16008:tid 140711005464320] [client 35.236.58.47:41902] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sendgrid/.env"] [unique_id "ap4aVbIsH66sGUHG2NNgEAAAAZM"]
[Sun Sep 06 20:58:46.729342 2026] [:error] [pid 16008:tid 140711080998656] [client 35.236.58.47:41918] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/sparkpost/.env"] [unique_id "ap4aVrIsH66sGUHG2NNgEgAAAYo"]
[Sun Sep 06 20:58:47.744198 2026] [:error] [pid 23449:tid 140711192246016] [client 35.236.58.47:41932] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/postmark/.env"] [unique_id "ap4aV2i7nVbCqCpvpuvT6wAAAAU"]
[Sun Sep 06 20:58:48.616869 2026] [:error] [pid 23450:tid 140711089391360] [client 35.236.58.47:41938] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailgun/.env"] [unique_id "ap4aWJYh2hMCcoNUiXCdmwAAAEk"]
[Sun Sep 06 20:58:49.555872 2026] [:error] [pid 23537:tid 140711022249728] [client 35.236.58.47:41952] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mandrill/.env"] [unique_id "ap4aWRoDFJALYxXq6s2NHQAAANE"]
[Sun Sep 06 20:58:50.419898 2026] [:error] [pid 18776:tid 140711072605952] [client 35.236.58.47:41960] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mailjet/.env"] [unique_id "ap4aWgDwOIgJaZ-zFcwh8wAAAcs"]
[Sun Sep 06 20:58:51.541670 2026] [:error] [pid 16008:tid 140711106176768] [client 35.236.58.47:41972] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/brevo/.env"] [unique_id "ap4aW7IsH66sGUHG2NNgFwAAAYc"]
[Sun Sep 06 20:58:52.545627 2026] [:error] [pid 23450:tid 140711039035136] [client 35.236.58.47:41988] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/transactional/.env"] [unique_id "ap4aXJYh2hMCcoNUiXCdpQAAAE8"]
[Sun Sep 06 20:58:53.520460 2026] [:error] [pid 16008:tid 140710988678912] [client 35.236.58.47:42002] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/bulk/.env"] [unique_id "ap4aXbIsH66sGUHG2NNgGQAAAZU"]
[Sun Sep 06 20:58:54.330350 2026] [:error] [pid 9772:tid 140711022249728] [client 35.236.58.47:42004] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/aws/.env"] [unique_id "ap4aXqdRhkOgzF_PKkiw9QAAAVE"]
[Sun Sep 06 20:58:56.104045 2026] [:error] [pid 23451:tid 140711055820544] [client 35.236.58.47:42014] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/azure/.env"] [unique_id "ap4aYGH227LtxadBWvPEDgAAAI0"]
[Sun Sep 06 20:58:56.990292 2026] [:error] [pid 23537:tid 140710997071616] [client 35.236.58.47:55120] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/gcp/.env"] [unique_id "ap4aYBoDFJALYxXq6s2NKwAAANQ"]
[Sun Sep 06 20:58:57.747383 2026] [:error] [pid 23537:tid 140711089391360] [client 35.236.58.47:55134] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cloud/.env"] [unique_id "ap4aYRoDFJALYxXq6s2NLgAAAMk"]
[Sun Sep 06 20:58:58.664264 2026] [:error] [pid 23449:tid 140710988678912] [client 35.236.58.47:55144] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/infrastructure/.env"] [unique_id "ap4aYmi7nVbCqCpvpuvT_AAAABU"]
[Sun Sep 06 20:58:59.511427 2026] [:error] [pid 23537:tid 140710988678912] [client 35.236.58.47:55150] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/docker/.env"] [unique_id "ap4aYxoDFJALYxXq6s2NMwAAANU"]
[Sun Sep 06 20:59:00.430718 2026] [:error] [pid 23537:tid 140711097784064] [client 35.236.58.47:55164] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/k8s/.env"] [unique_id "ap4aZBoDFJALYxXq6s2NNAAAAMg"]
[Sun Sep 06 20:59:01.242235 2026] [:error] [pid 23450:tid 140710971893504] [client 35.236.58.47:55174] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/kubernetes/.env"] [unique_id "ap4aZZYh2hMCcoNUiXCdtwAAAFc"]
[Sun Sep 06 20:59:02.177550 2026] [:error] [pid 23449:tid 140711209031424] [client 35.236.58.47:55180] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/terraform/.env"] [unique_id "ap4aZmi7nVbCqCpvpuvT_QAAAAM"]
[Sun Sep 06 20:59:03.077129 2026] [:error] [pid 23450:tid 140711064213248] [client 35.236.58.47:55194] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/ansible/.env"] [unique_id "ap4aZ5Yh2hMCcoNUiXCduAAAAEw"]
[Sun Sep 06 20:59:04.010286 2026] [:error] [pid 23537:tid 140710963500800] [client 35.236.58.47:55208] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/.env"] [unique_id "ap4aaBoDFJALYxXq6s2NOwAAANg"]
[Sun Sep 06 20:59:05.031668 2026] [:error] [pid 23720:tid 140710971893504] [client 35.236.58.47:55210] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/ci/.env"] [unique_id "ap4aaexVGD-6vo_HLH6gywAAARc"]
[Sun Sep 06 20:59:06.161536 2026] [:error] [pid 23451:tid 140711106176768] [client 35.236.58.47:56528] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/cd/.env"] [unique_id "ap4aamH227LtxadBWvPEGgAAAIc"]
[Sun Sep 06 20:59:07.163544 2026] [:error] [pid 16008:tid 140710963500800] [client 35.236.58.47:56538] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/jenkins/.env"] [unique_id "ap4aa7IsH66sGUHG2NNgHgAAAZg"]
[Sun Sep 06 20:59:08.124809 2026] [:error] [pid 23450:tid 140711106176768] [client 35.236.58.47:56554] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/gitlab/.env"] [unique_id "ap4abJYh2hMCcoNUiXCdvwAAAEc"]
[Sun Sep 06 20:59:09.235543 2026] [:error] [pid 16008:tid 140711013857024] [client 35.236.58.47:56570] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/github/.env"] [unique_id "ap4abbIsH66sGUHG2NNgHwAAAZI"]
[Sun Sep 06 20:59:10.058552 2026] [:error] [pid 23720:tid 140711114569472] [client 35.236.58.47:56578] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/actions/.env"] [unique_id "ap4abuxVGD-6vo_HLH6gzwAAAQY"]
[Sun Sep 06 20:59:11.073378 2026] [:error] [pid 23449:tid 140711013857024] [client 35.236.58.47:56586] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/circleci/.env"] [unique_id "ap4ab2i7nVbCqCpvpuvUBAAAABI"]
[Sun Sep 06 20:59:11.894373 2026] [:error] [pid 9772:tid 140710997071616] [client 35.236.58.47:56594] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/travis/.env"] [unique_id "ap4ab6dRhkOgzF_PKkixAQAAAVQ"]
[Sun Sep 06 20:59:12.964696 2026] [:error] [pid 23537:tid 140711234209536] [client 35.236.58.47:56596] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/buildkite/.env"] [unique_id "ap4acBoDFJALYxXq6s2NVAAAAMA"]
[Sun Sep 06 20:59:13.972326 2026] [:error] [pid 16008:tid 140711030642432] [client 35.236.58.47:56612] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mysql/.env"] [unique_id "ap4acbIsH66sGUHG2NNgIgAAAZA"]
[Sun Sep 06 20:59:14.934545 2026] [:error] [pid 23537:tid 140711064213248] [client 35.236.58.47:56618] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/postgres/.env"] [unique_id "ap4achoDFJALYxXq6s2NYAAAAMw"]
[Sun Sep 06 20:59:16.706371 2026] [:error] [pid 9772:tid 140711022249728] [client 35.236.58.47:59598] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/mongodb/.env"] [unique_id "ap4adKdRhkOgzF_PKkixCgAAAVE"]
[Sun Sep 06 20:59:17.801609 2026] [:error] [pid 23720:tid 140711089391360] [client 35.236.58.47:59600] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/redis/.env"] [unique_id "ap4adexVGD-6vo_HLH6g3QAAAQk"]
[Sun Sep 06 20:59:18.899074 2026] [:error] [pid 23451:tid 140710963500800] [client 35.236.58.47:59608] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/elasticsearch/.env"] [unique_id "ap4admH227LtxadBWvPEIAAAAJg"]
[Sun Sep 06 20:59:19.953143 2026] [:error] [pid 9772:tid 140711072605952] [client 35.236.58.47:59622] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/rabbitmq/.env"] [unique_id "ap4ad6dRhkOgzF_PKkixDAAAAUs"]
[Sun Sep 06 20:59:20.869231 2026] [:error] [pid 23449:tid 140710988678912] [client 35.236.58.47:59626] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/kafka/.env"] [unique_id "ap4aeGi7nVbCqCpvpuvUEQAAABU"]
[Sun Sep 06 20:59:21.755067 2026] [:error] [pid 18776:tid 140711217424128] [client 35.236.58.47:59632] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/queue/.env"] [unique_id "ap4aeQDwOIgJaZ-zFcwiDwAAAcI"]
[Sun Sep 06 20:59:22.682169 2026] [:error] [pid 23450:tid 140711039035136] [client 35.236.58.47:59642] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/worker/.env"] [unique_id "ap4aepYh2hMCcoNUiXCd0gAAAE8"]
[Sun Sep 06 20:59:23.875332 2026] [:error] [pid 23537:tid 140711209031424] [client 35.236.58.47:59650] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/job/.env"] [unique_id "ap4aexoDFJALYxXq6s2NeQAAAMM"]
[Sun Sep 06 20:59:24.825340 2026] [:error] [pid 9772:tid 140711114569472] [client 35.236.58.47:59658] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/test/.env"] [unique_id "ap4afKdRhkOgzF_PKkixEAAAAUY"]
[Sun Sep 06 20:59:25.683530 2026] [:error] [pid 18776:tid 140711217424128] [client 35.236.58.47:50786] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/qa/.env"] [unique_id "ap4afQDwOIgJaZ-zFcwiFAAAAcI"]
[Sun Sep 06 20:59:26.671764 2026] [:error] [pid 23537:tid 140710997071616] [client 35.236.58.47:50794] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/preview/.env"] [unique_id "ap4afhoDFJALYxXq6s2NhQAAANQ"]
[Sun Sep 06 20:59:27.668773 2026] [:error] [pid 23720:tid 140711030642432] [client 35.236.58.47:50798] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/beta/.env"] [unique_id "ap4af-xVGD-6vo_HLH6g6AAAARA"]
[Sun Sep 06 20:59:28.698800 2026] [:error] [pid 23449:tid 140711047427840] [client 35.236.58.47:50808] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/uat/.env"] [unique_id "ap4agGi7nVbCqCpvpuvUGQAAAA4"]
[Sun Sep 06 20:59:29.799614 2026] [:error] [pid 23537:tid 140711114569472] [client 35.236.58.47:50822] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/stage/.env"] [unique_id "ap4agRoDFJALYxXq6s2NjQAAAMY"]
[Sun Sep 06 20:59:30.608379 2026] [:error] [pid 9772:tid 140711072605952] [client 35.236.58.47:50824] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/development/.env"] [unique_id "ap4agqdRhkOgzF_PKkixFAAAAUs"]
[Sun Sep 06 20:59:31.617297 2026] [:error] [pid 23450:tid 140711097784064] [client 35.236.58.47:50832] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/production/.env"] [unique_id "ap4ag5Yh2hMCcoNUiXCd4QAAAEg"]
[Sun Sep 06 20:59:32.581022 2026] [:error] [pid 23537:tid 140711022249728] [client 35.236.58.47:50840] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/config/app/.env"] [unique_id "ap4ahBoDFJALYxXq6s2NlgAAANE"]
[Sun Sep 06 20:59:33.575782 2026] [proxy_fcgi:error] [pid 23720:tid 140710971893504] [client 35.236.58.47:50856] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:34.566171 2026] [proxy_fcgi:error] [pid 23451:tid 140711022249728] [client 35.236.58.47:50870] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:35.559664 2026] [proxy_fcgi:error] [pid 23537:tid 140711200638720] [client 35.236.58.47:50874] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:36.422115 2026] [proxy_fcgi:error] [pid 18776:tid 140711106176768] [client 35.236.58.47:32968] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:37.286526 2026] [proxy_fcgi:error] [pid 23451:tid 140711106176768] [client 35.236.58.47:32972] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:38.414006 2026] [proxy_fcgi:error] [pid 23451:tid 140711192246016] [client 35.236.58.47:32988] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:39.370605 2026] [proxy_fcgi:error] [pid 9772:tid 140711080998656] [client 35.236.58.47:33002] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:41.134967 2026] [proxy_fcgi:error] [pid 23451:tid 140711089391360] [client 35.236.58.47:33012] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:41.965179 2026] [proxy_fcgi:error] [pid 23537:tid 140711039035136] [client 35.236.58.47:33018] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:42.817275 2026] [proxy_fcgi:error] [pid 23537:tid 140710988678912] [client 35.236.58.47:33034] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:49.765505 2026] [proxy_fcgi:error] [pid 23449:tid 140711030642432] [client 35.236.58.47:33774] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:50.686915 2026] [proxy_fcgi:error] [pid 18776:tid 140711047427840] [client 35.236.58.47:33786] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:51.616934 2026] [proxy_fcgi:error] [pid 23450:tid 140710980286208] [client 35.236.58.47:33788] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:52.620034 2026] [proxy_fcgi:error] [pid 18776:tid 140710997071616] [client 35.236.58.47:33798] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:53.774214 2026] [proxy_fcgi:error] [pid 9772:tid 140711225816832] [client 35.236.58.47:33800] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:54.911867 2026] [proxy_fcgi:error] [pid 16008:tid 140711039035136] [client 35.236.58.47:33804] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 20:59:57.556656 2026] [:error] [pid 23720:tid 140711209031424] [client 35.236.58.47:55166] [client 35.236.58.47] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.pesema.com"] [uri "/webroot/index.php/_environment"] [unique_id "ap4anexVGD-6vo_HLH6g_wAAAQM"]
[Sun Sep 06 20:59:58.467922 2026] [:error] [pid 9772:tid 140711106176768] [client 35.236.58.47:55170] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/mail/phpinfo.php"] [unique_id "ap4anqdRhkOgzF_PKkixOwAAAUc"]
[Sun Sep 06 21:00:00.578309 2026] [:error] [pid 23451:tid 140711089391360] [client 35.236.58.47:55174] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cpanel/phpinfo.php"] [unique_id "ap4aoGH227LtxadBWvPETAAAAIk"]
[Sun Sep 06 21:00:01.594315 2026] [:error] [pid 23537:tid 140711217424128] [client 35.236.58.47:55180] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/hosting/phpinfo.php"] [unique_id "ap4aoRoDFJALYxXq6s2N0AAAAMI"]
[Sun Sep 06 21:00:02.552798 2026] [:error] [pid 23537:tid 140711097784064] [client 35.236.58.47:55192] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/webmail/phpinfo.php"] [unique_id "ap4aohoDFJALYxXq6s2N1AAAAMg"]
[Sun Sep 06 21:00:03.447858 2026] [:error] [pid 23720:tid 140711192246016] [client 35.236.58.47:55196] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/smtp/phpinfo.php"] [unique_id "ap4ao-xVGD-6vo_HLH6hCAAAAQU"]
[Sun Sep 06 21:00:04.304513 2026] [:error] [pid 23720:tid 140710997071616] [client 35.236.58.47:55200] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php.bak"] [unique_id "ap4apOxVGD-6vo_HLH6hDAAAARQ"]
[Sun Sep 06 21:00:05.234543 2026] [:error] [pid 23720:tid 140711106176768] [client 35.236.58.47:55212] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php.old"] [unique_id "ap4apexVGD-6vo_HLH6hDQAAAQc"]
[Sun Sep 06 21:00:06.595269 2026] [:error] [pid 23451:tid 140710980286208] [client 35.236.58.47:39068] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php~"] [unique_id "ap4apmH227LtxadBWvPEWwAAAJY"]
[Sun Sep 06 21:00:08.364211 2026] [:error] [pid 23537:tid 140711234209536] [client 35.236.58.47:39084] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/info.php.bak"] [unique_id "ap4aqBoDFJALYxXq6s2N5wAAAMA"]
[Sun Sep 06 21:00:09.445621 2026] [:error] [pid 23450:tid 140711234209536] [client 35.236.58.47:39094] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/phpinfo.php.save"] [unique_id "ap4aqZYh2hMCcoNUiXCeKgAAAEA"]
[Sun Sep 06 21:00:10.260772 2026] [:error] [pid 18776:tid 140710988678912] [client 35.236.58.47:39096] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/staging/phpinfo.php"] [unique_id "ap4aqgDwOIgJaZ-zFcwiVAAAAdU"]
[Sun Sep 06 21:00:11.048915 2026] [:error] [pid 23449:tid 140711106176768] [client 35.236.58.47:39098] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/beta/phpinfo.php"] [unique_id "ap4aq2i7nVbCqCpvpuvUUAAAAAc"]
[Sun Sep 06 21:00:11.911734 2026] [:error] [pid 23451:tid 140710997071616] [client 35.236.58.47:39110] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/uat/phpinfo.php"] [unique_id "ap4aq2H227LtxadBWvPEawAAAJQ"]
[Sun Sep 06 21:00:12.798114 2026] [:error] [pid 23537:tid 140711064213248] [client 35.236.58.47:39122] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/qa/phpinfo.php"] [unique_id "ap4arBoDFJALYxXq6s2N-QAAAMw"]
[Sun Sep 06 21:00:13.614499 2026] [:error] [pid 23537:tid 140711064213248] [client 35.236.58.47:39136] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/preview/phpinfo.php"] [unique_id "ap4arRoDFJALYxXq6s2OAgAAAMw"]
[Sun Sep 06 21:00:14.870449 2026] [:error] [pid 16008:tid 140711064213248] [client 35.236.58.47:39150] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/www/phpinfo.php"] [unique_id "ap4arrIsH66sGUHG2NNgXwAAAYw"]
[Sun Sep 06 21:00:15.619557 2026] [:error] [pid 9772:tid 140710963500800] [client 35.236.58.47:39160] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/htdocs/phpinfo.php"] [unique_id "ap4ar6dRhkOgzF_PKkixVAAAAVg"]
[Sun Sep 06 21:00:16.628366 2026] [:error] [pid 23450:tid 140711089391360] [client 35.236.58.47:47838] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/public_html/phpinfo.php"] [unique_id "ap4asJYh2hMCcoNUiXCeQgAAAEk"]
[Sun Sep 06 21:00:17.663015 2026] [:error] [pid 9772:tid 140711064213248] [client 35.236.58.47:47852] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/site/phpinfo.php"] [unique_id "ap4asadRhkOgzF_PKkixWgAAAUw"]
[Sun Sep 06 21:00:18.452653 2026] [:error] [pid 23537:tid 140710988678912] [client 35.236.58.47:47854] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/docs/phpinfo.php"] [unique_id "ap4ashoDFJALYxXq6s2ODwAAANU"]
[Sun Sep 06 21:00:19.496693 2026] [:error] [pid 23720:tid 140710980286208] [client 35.236.58.47:47870] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "ap4as-xVGD-6vo_HLH6hJAAAARY"]
[Sun Sep 06 21:00:20.378261 2026] [:error] [pid 23537:tid 140711072605952] [client 35.236.58.47:47872] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/administrator/phpinfo.php"] [unique_id "ap4atBoDFJALYxXq6s2OFAAAAMs"]
[Sun Sep 06 21:00:21.381440 2026] [:error] [pid 23449:tid 140711005464320] [client 35.236.58.47:47880] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/core/phpinfo.php"] [unique_id "ap4atWi7nVbCqCpvpuvUZQAAABM"]
[Sun Sep 06 21:00:22.147166 2026] [:error] [pid 23720:tid 140711114569472] [client 35.236.58.47:47886] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/includes/phpinfo.php"] [unique_id "ap4atuxVGD-6vo_HLH6hKAAAAQY"]
[Sun Sep 06 21:00:23.023551 2026] [:error] [pid 23537:tid 140711089391360] [client 35.236.58.47:47898] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/service-account.json"] [unique_id "ap4atxoDFJALYxXq6s2OHAAAAMk"]
[Sun Sep 06 21:00:24.089139 2026] [:error] [pid 23537:tid 140711106176768] [client 35.236.58.47:47912] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sa.json"] [unique_id "ap4auBoDFJALYxXq6s2OIgAAAMc"]
[Sun Sep 06 21:00:25.027707 2026] [:error] [pid 23450:tid 140711217424128] [client 35.236.58.47:47916] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gcp-key.json"] [unique_id "ap4auZYh2hMCcoNUiXCeUQAAAEI"]
[Sun Sep 06 21:00:25.786354 2026] [:error] [pid 23720:tid 140711005464320] [client 35.236.58.47:34134] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gcp-credentials.json"] [unique_id "ap4auexVGD-6vo_HLH6hLgAAARM"]
[Sun Sep 06 21:00:26.753904 2026] [:error] [pid 9772:tid 140711080998656] [client 35.236.58.47:34142] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gcp-sa.json"] [unique_id "ap4auqdRhkOgzF_PKkixZAAAAUo"]
[Sun Sep 06 21:00:27.589121 2026] [:error] [pid 23537:tid 140711005464320] [client 35.236.58.47:34154] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/credentials.json"] [unique_id "ap4auxoDFJALYxXq6s2OKgAAANM"]
[Sun Sep 06 21:00:29.409750 2026] [:error] [pid 23537:tid 140711013857024] [client 35.236.58.47:34162] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/google-credentials.json"] [unique_id "ap4avRoDFJALYxXq6s2OLgAAANI"]
[Sun Sep 06 21:00:30.436119 2026] [:error] [pid 23537:tid 140710963500800] [client 35.236.58.47:34168] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/google-key.json"] [unique_id "ap4avhoDFJALYxXq6s2OMwAAANg"]
[Sun Sep 06 21:00:31.332529 2026] [:error] [pid 23720:tid 140711039035136] [client 35.236.58.47:34178] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/.config/gcloud/application_default_credentials.json"] [unique_id "ap4av-xVGD-6vo_HLH6hNQAAAQ8"]
[Sun Sep 06 21:00:32.217797 2026] [:error] [pid 23451:tid 140711217424128] [client 35.236.58.47:34182] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/application_default_credentials.json"] [unique_id "ap4awGH227LtxadBWvPEiAAAAII"]
[Sun Sep 06 21:00:33.242955 2026] [:error] [pid 23450:tid 140711072605952] [client 35.236.58.47:34198] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/key.json"] [unique_id "ap4awZYh2hMCcoNUiXCeWwAAAEs"]
[Sun Sep 06 21:00:34.260251 2026] [:error] [pid 23537:tid 140711114569472] [client 35.236.58.47:34206] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/keyfile.json"] [unique_id "ap4awhoDFJALYxXq6s2OOgAAAMY"]
[Sun Sep 06 21:00:35.126891 2026] [:error] [pid 9772:tid 140711234209536] [client 35.236.58.47:34208] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/firebase-adminsdk.json"] [unique_id "ap4aw6dRhkOgzF_PKkixagAAAUA"]
[Sun Sep 06 21:00:36.272930 2026] [:error] [pid 23450:tid 140711225816832] [client 35.236.58.47:39086] [client 35.236.58.47] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/firebase-key.json"] [unique_id "ap4axJYh2hMCcoNUiXCeYAAAAEE"]
[Sun Sep 06 22:16:46.185591 2026] [proxy_fcgi:error] [pid 23720:tid 140710988678912] [client 20.151.10.161:39624] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:46.396999 2026] [proxy_fcgi:error] [pid 23449:tid 140711114569472] [client 20.151.10.161:57064] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:46.599807 2026] [proxy_fcgi:error] [pid 9772:tid 140711013857024] [client 20.151.10.161:39648] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:47.018463 2026] [proxy_fcgi:error] [pid 9772:tid 140710988678912] [client 20.151.10.161:32820] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:47.380480 2026] [proxy_fcgi:error] [pid 23451:tid 140711080998656] [client 20.151.10.161:14856] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:47.607609 2026] [proxy_fcgi:error] [pid 9772:tid 140711192246016] [client 20.151.10.161:14880] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:47.818597 2026] [proxy_fcgi:error] [pid 23720:tid 140711064213248] [client 20.151.10.161:57079] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:48.031325 2026] [proxy_fcgi:error] [pid 23451:tid 140711080998656] [client 20.151.10.161:32774] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:48.302777 2026] [proxy_fcgi:error] [pid 18776:tid 140711030642432] [client 20.151.10.161:30681] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:48.511852 2026] [proxy_fcgi:error] [pid 18776:tid 140711022249728] [client 20.151.10.161:30683] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:48.745405 2026] [proxy_fcgi:error] [pid 23449:tid 140711209031424] [client 20.151.10.161:30685] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:48.971961 2026] [proxy_fcgi:error] [pid 23451:tid 140711013857024] [client 20.151.10.161:32787] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:49.267669 2026] [proxy_fcgi:error] [pid 18776:tid 140711047427840] [client 20.151.10.161:28821] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:49.513547 2026] [proxy_fcgi:error] [pid 23451:tid 140711225816832] [client 20.151.10.161:32768] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:49.727403 2026] [proxy_fcgi:error] [pid 23449:tid 140710988678912] [client 20.151.10.161:30688] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:49.945042 2026] [proxy_fcgi:error] [pid 23451:tid 140711200638720] [client 20.151.10.161:39577] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:50.157296 2026] [proxy_fcgi:error] [pid 23537:tid 140711055820544] [client 20.151.10.161:30689] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:50.409908 2026] [proxy_fcgi:error] [pid 23537:tid 140710980286208] [client 20.151.10.161:39646] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:50.627318 2026] [proxy_fcgi:error] [pid 23537:tid 140711209031424] [client 20.151.10.161:28863] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:50.848400 2026] [proxy_fcgi:error] [pid 9772:tid 140710988678912] [client 20.151.10.161:30682] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:51.070005 2026] [proxy_fcgi:error] [pid 9772:tid 140711200638720] [client 20.151.10.161:39567] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:51.293059 2026] [proxy_fcgi:error] [pid 23451:tid 140711225816832] [client 20.151.10.161:39636] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:51.503935 2026] [proxy_fcgi:error] [pid 23449:tid 140711106176768] [client 20.151.10.161:39587] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:51.712739 2026] [proxy_fcgi:error] [pid 23451:tid 140711039035136] [client 20.151.10.161:39652] AH01071: Got error 'Primary script unknown'
[Sun Sep 06 22:16:51.712921 2026] [:error] [pid 23451:tid 140711039035136] [client 20.151.10.161:39652] [client 20.151.10.161] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.pesema.com"] [uri "/mac.php"] [unique_id "ap4so2H227LtxadBWvPcBwAAAI8"]
[Sun Sep 06 22:16:51.955234 2026] [:error] [pid 23537:tid 140710963500800] [client 20.151.10.161:14891] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/makeasmtp.php"] [unique_id "ap4soxoDFJALYxXq6s2sNwAAANg"]
[Sun Sep 06 22:16:52.160784 2026] [:error] [pid 23451:tid 140711022249728] [client 20.151.10.161:14854] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/pucci.php"] [unique_id "ap4spGH227LtxadBWvPcCwAAAJE"]
[Sun Sep 06 22:16:52.398321 2026] [:error] [pid 23451:tid 140711047427840] [client 20.151.10.161:32817] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/puc.php"] [unique_id "ap4spGH227LtxadBWvPcDQAAAI4"]
[Sun Sep 06 22:16:52.619012 2026] [:error] [pid 23451:tid 140711209031424] [client 20.151.10.161:39642] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/8.php"] [unique_id "ap4spGH227LtxadBWvPcDwAAAIM"]
[Sun Sep 06 22:16:52.824225 2026] [:error] [pid 18776:tid 140711114569472] [client 20.151.10.161:39598] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/1.php"] [unique_id "ap4spADwOIgJaZ-zFcwx-AAAAcY"]
[Sun Sep 06 22:16:53.048005 2026] [:error] [pid 23451:tid 140711234209536] [client 20.151.10.161:39568] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/admin.php"] [unique_id "ap4spWH227LtxadBWvPcEgAAAIA"]
[Sun Sep 06 22:16:53.253120 2026] [:error] [pid 23451:tid 140711039035136] [client 20.151.10.161:14861] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/edit.php"] [unique_id "ap4spWH227LtxadBWvPcEwAAAI8"]
[Sun Sep 06 22:16:53.540188 2026] [:error] [pid 23720:tid 140710988678912] [client 20.151.10.161:32797] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/inputs.php"] [unique_id "ap4spexVGD-6vo_HLH60swAAARU"]
[Sun Sep 06 22:16:53.773007 2026] [:error] [pid 23449:tid 140711200638720] [client 20.151.10.161:39627] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/av.php"] [unique_id "ap4spWi7nVbCqCpvpuvl8AAAAAQ"]
[Sun Sep 06 22:16:53.985192 2026] [:error] [pid 23449:tid 140711005464320] [client 20.151.10.161:28837] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/classwithtostring.php"] [unique_id "ap4spWi7nVbCqCpvpuvl8QAAABM"]
[Sun Sep 06 22:16:54.204063 2026] [:error] [pid 23720:tid 140711114569472] [client 20.151.10.161:30700] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/adminfuns.php"] [unique_id "ap4spuxVGD-6vo_HLH60tQAAAQY"]
[Sun Sep 06 22:16:54.408160 2026] [:error] [pid 23720:tid 140711013857024] [client 20.151.10.161:32791] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/222.php"] [unique_id "ap4spuxVGD-6vo_HLH60twAAARI"]
[Sun Sep 06 22:16:54.615023 2026] [:error] [pid 23720:tid 140711064213248] [client 20.151.10.161:39557] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/BDKR28WP.php"] [unique_id "ap4spuxVGD-6vo_HLH60uAAAAQw"]
[Sun Sep 06 22:16:54.824135 2026] [:error] [pid 23720:tid 140711005464320] [client 20.151.10.161:39583] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp.php"] [unique_id "ap4spuxVGD-6vo_HLH60uQAAARM"]
[Sun Sep 06 22:16:55.035273 2026] [:error] [pid 18776:tid 140710988678912] [client 20.151.10.161:32830] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/simple.php"] [unique_id "ap4spwDwOIgJaZ-zFcwx_AAAAdU"]
[Sun Sep 06 22:16:55.240295 2026] [:error] [pid 23720:tid 140711200638720] [client 20.151.10.161:39655] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/chosen.php"] [unique_id "ap4sp-xVGD-6vo_HLH60ugAAAQQ"]
[Sun Sep 06 22:16:55.471816 2026] [:error] [pid 9772:tid 140711209031424] [client 20.151.10.161:39600] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/als.php"] [unique_id "ap4sp6dRhkOgzF_PKkjLVQAAAUM"]
[Sun Sep 06 22:16:55.689542 2026] [:error] [pid 23537:tid 140711200638720] [client 20.151.10.161:28861] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/admin.php"] [unique_id "ap4spxoDFJALYxXq6s2sPAAAAMQ"]
[Sun Sep 06 22:16:55.904410 2026] [:error] [pid 23449:tid 140711030642432] [client 20.151.10.161:47445] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/f35.php"] [unique_id "ap4sp2i7nVbCqCpvpuvl9gAAABA"]
[Sun Sep 06 22:16:56.121705 2026] [:error] [pid 18776:tid 140710963500800] [client 20.151.10.161:30701] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/aaa.php"] [unique_id "ap4sqADwOIgJaZ-zFcwx_gAAAdg"]
[Sun Sep 06 22:16:56.323784 2026] [:error] [pid 23449:tid 140711047427840] [client 20.151.10.161:39614] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gecko.php"] [unique_id "ap4sqGi7nVbCqCpvpuvl9wAAAA4"]
[Sun Sep 06 22:16:56.568040 2026] [:error] [pid 23451:tid 140711064213248] [client 20.151.10.161:14865] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/xiugai.php"] [unique_id "ap4sqGH227LtxadBWvPcGgAAAIw"]
[Sun Sep 06 22:16:56.783665 2026] [:error] [pid 23450:tid 140710980286208] [client 20.151.10.161:32798] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/adminner.php"] [unique_id "ap4sqJYh2hMCcoNUiXCzRwAAAFY"]
[Sun Sep 06 22:16:56.994341 2026] [:error] [pid 23449:tid 140711225816832] [client 20.151.10.161:30691] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/inx.php"] [unique_id "ap4sqGi7nVbCqCpvpuvl-QAAAAE"]
[Sun Sep 06 22:16:57.206488 2026] [:error] [pid 23449:tid 140710971893504] [client 20.151.10.161:14893] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/11.php"] [unique_id "ap4sqWi7nVbCqCpvpuvl-wAAABc"]
[Sun Sep 06 22:16:57.419698 2026] [:error] [pid 23537:tid 140711047427840] [client 20.151.10.161:30659] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/File.php"] [unique_id "ap4sqRoDFJALYxXq6s2sPQAAAM4"]
[Sun Sep 06 22:16:57.670623 2026] [:error] [pid 23451:tid 140711064213248] [client 20.151.10.161:39602] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ap4sqWH227LtxadBWvPcIAAAAIw"]
[Sun Sep 06 22:16:57.890893 2026] [:error] [pid 9772:tid 140710988678912] [client 20.151.10.161:32831] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ap4sqadRhkOgzF_PKkjLWAAAAVU"]
[Sun Sep 06 22:16:58.097332 2026] [:error] [pid 23450:tid 140710988678912] [client 20.151.10.161:28812] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ap4sqpYh2hMCcoNUiXCzSQAAAFU"]
[Sun Sep 06 22:16:58.310353 2026] [:error] [pid 23450:tid 140711005464320] [client 20.151.10.161:57082] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "ap4sqpYh2hMCcoNUiXCzSwAAAFM"]
[Sun Sep 06 22:16:58.531101 2026] [:error] [pid 18776:tid 140711217424128] [client 20.151.10.161:32808] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "ap4sqgDwOIgJaZ-zFcwyAgAAAcI"]
[Sun Sep 06 22:16:58.758463 2026] [:error] [pid 23449:tid 140711106176768] [client 20.151.10.161:39578] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "ap4sqmi7nVbCqCpvpuvl_QAAAAc"]
[Sun Sep 06 22:16:58.962562 2026] [:error] [pid 18776:tid 140711005464320] [client 20.151.10.161:47478] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/media.php"] [unique_id "ap4sqgDwOIgJaZ-zFcwyBQAAAdM"]
[Sun Sep 06 22:16:59.165194 2026] [:error] [pid 16008:tid 140711089391360] [client 20.151.10.161:14876] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/inso.php"] [unique_id "ap4sq7IsH66sGUHG2NN0ugAAAYk"]
[Sun Sep 06 22:16:59.369326 2026] [:error] [pid 23451:tid 140711030642432] [client 20.151.10.161:14905] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/shiny.php"] [unique_id "ap4sq2H227LtxadBWvPcIQAAAJA"]
[Sun Sep 06 22:16:59.573202 2026] [:error] [pid 23451:tid 140711047427840] [client 20.151.10.161:57083] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/403dd.php"] [unique_id "ap4sq2H227LtxadBWvPcIwAAAI4"]
[Sun Sep 06 22:16:59.773777 2026] [:error] [pid 23449:tid 140711217424128] [client 20.151.10.161:30704] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/baba.php"] [unique_id "ap4sq2i7nVbCqCpvpuvmAgAAAAI"]
[Sun Sep 06 22:16:59.986549 2026] [:error] [pid 23537:tid 140711039035136] [client 20.151.10.161:30680] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/site.php"] [unique_id "ap4sqxoDFJALYxXq6s2sQAAAAM8"]
[Sun Sep 06 22:17:00.210113 2026] [:error] [pid 23451:tid 140711072605952] [client 20.151.10.161:30693] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cabs.php"] [unique_id "ap4srGH227LtxadBWvPcJAAAAIs"]
[Sun Sep 06 22:17:00.412666 2026] [:error] [pid 23449:tid 140711005464320] [client 20.151.10.161:39565] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/insc.php"] [unique_id "ap4srGi7nVbCqCpvpuvmBQAAABM"]
[Sun Sep 06 22:17:00.634311 2026] [:error] [pid 16008:tid 140711106176768] [client 20.151.10.161:47365] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/file.php"] [unique_id "ap4srLIsH66sGUHG2NN0vAAAAYc"]
[Sun Sep 06 22:17:00.851018 2026] [:error] [pid 9772:tid 140711209031424] [client 20.151.10.161:28816] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/dex.php"] [unique_id "ap4srKdRhkOgzF_PKkjLXwAAAUM"]
[Sun Sep 06 22:17:01.064361 2026] [:error] [pid 23449:tid 140711114569472] [client 20.151.10.161:28818] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/key.php"] [unique_id "ap4srWi7nVbCqCpvpuvmBgAAAAY"]
[Sun Sep 06 22:17:01.267038 2026] [:error] [pid 16008:tid 140711217424128] [client 20.151.10.161:39664] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/kir.php"] [unique_id "ap4srbIsH66sGUHG2NN0vQAAAYI"]
[Sun Sep 06 22:17:01.473871 2026] [:error] [pid 23451:tid 140711217424128] [client 20.151.10.161:14884] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/nofile.php"] [unique_id "ap4srWH227LtxadBWvPcJQAAAII"]
[Sun Sep 06 22:17:01.726525 2026] [:error] [pid 9772:tid 140711080998656] [client 20.151.10.161:14903] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/fling.php"] [unique_id "ap4sradRhkOgzF_PKkjLYAAAAUo"]
[Sun Sep 06 22:17:01.936182 2026] [:error] [pid 23451:tid 140711217424128] [client 20.151.10.161:47366] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/btyuio.php"] [unique_id "ap4srWH227LtxadBWvPcJgAAAII"]
[Sun Sep 06 22:17:02.143297 2026] [:error] [pid 23537:tid 140710971893504] [client 20.151.10.161:39678] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/or.php"] [unique_id "ap4srhoDFJALYxXq6s2sQgAAANc"]
[Sun Sep 06 22:17:02.350410 2026] [:error] [pid 23537:tid 140710963500800] [client 20.151.10.161:39628] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sm.php"] [unique_id "ap4srhoDFJALYxXq6s2sQwAAANg"]
[Sun Sep 06 22:17:02.571986 2026] [:error] [pid 23451:tid 140711114569472] [client 20.151.10.161:57078] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/araso.php"] [unique_id "ap4srmH227LtxadBWvPcKAAAAIY"]
[Sun Sep 06 22:17:02.775824 2026] [:error] [pid 23720:tid 140711217424128] [client 20.151.10.161:28854] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/a.php"] [unique_id "ap4sruxVGD-6vo_HLH60wwAAAQI"]
[Sun Sep 06 22:17:02.977055 2026] [:error] [pid 9772:tid 140710988678912] [client 20.151.10.161:14910] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sb.php"] [unique_id "ap4srqdRhkOgzF_PKkjLYwAAAVU"]
[Sun Sep 06 22:17:03.186133 2026] [:error] [pid 23449:tid 140711064213248] [client 20.151.10.161:30663] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/index.php"] [unique_id "ap4sr2i7nVbCqCpvpuvmCAAAAAw"]
[Sun Sep 06 22:17:03.393886 2026] [:error] [pid 18776:tid 140711005464320] [client 20.151.10.161:30707] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ap4srwDwOIgJaZ-zFcwyCgAAAdM"]
[Sun Sep 06 22:17:03.602501 2026] [:error] [pid 23450:tid 140711114569472] [client 20.151.10.161:30710] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/css/"] [unique_id "ap4sr5Yh2hMCcoNUiXCzTQAAAEY"]
[Sun Sep 06 22:17:03.865769 2026] [:error] [pid 23451:tid 140711047427840] [client 20.151.10.161:14882] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ap4sr2H227LtxadBWvPcKwAAAI4"]
[Sun Sep 06 22:17:04.085546 2026] [:error] [pid 23720:tid 140711114569472] [client 20.151.10.161:39638] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "ap4ssOxVGD-6vo_HLH60xgAAAQY"]
[Sun Sep 06 22:17:04.305783 2026] [:error] [pid 23451:tid 140711114569472] [client 20.151.10.161:57057] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/js/index.php"] [unique_id "ap4ssGH227LtxadBWvPcLQAAAIY"]
[Sun Sep 06 22:17:04.508203 2026] [:error] [pid 23451:tid 140711114569472] [client 20.151.10.161:30716] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/admin.php"] [unique_id "ap4ssGH227LtxadBWvPcLgAAAIY"]
[Sun Sep 06 22:17:04.717918 2026] [:error] [pid 23720:tid 140711089391360] [client 20.151.10.161:32796] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/themes/index.php"] [unique_id "ap4ssOxVGD-6vo_HLH60yAAAAQk"]
[Sun Sep 06 22:17:04.924964 2026] [:error] [pid 16008:tid 140711217424128] [client 20.151.10.161:32519] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/av.php"] [unique_id "ap4ssLIsH66sGUHG2NN0wQAAAYI"]
[Sun Sep 06 22:17:05.128567 2026] [:error] [pid 23450:tid 140711209031424] [client 20.151.10.161:30675] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/themes/index.php"] [unique_id "ap4ssZYh2hMCcoNUiXCzTwAAAEM"]
[Sun Sep 06 22:17:05.342473 2026] [:error] [pid 23451:tid 140711055820544] [client 20.151.10.161:47455] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cgi-bin/index.php"] [unique_id "ap4ssWH227LtxadBWvPcMgAAAI0"]
[Sun Sep 06 22:17:05.543215 2026] [:error] [pid 23451:tid 140711089391360] [client 20.151.10.161:28856] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-manager.php"] [unique_id "ap4ssWH227LtxadBWvPcNAAAAIk"]
[Sun Sep 06 22:17:05.760546 2026] [:error] [pid 9772:tid 140711080998656] [client 20.151.10.161:57046] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ap4ssadRhkOgzF_PKkjLZgAAAUo"]
[Sun Sep 06 22:17:05.963335 2026] [:error] [pid 16008:tid 140711089391360] [client 20.151.10.161:39564] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cgi-bin/admin.php"] [unique_id "ap4ssbIsH66sGUHG2NN0wwAAAYk"]
[Sun Sep 06 22:17:06.171091 2026] [:error] [pid 23449:tid 140711106176768] [client 20.151.10.161:39621] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/"] [unique_id "ap4ssmi7nVbCqCpvpuvmEgAAAAc"]
[Sun Sep 06 22:17:06.374262 2026] [:error] [pid 23451:tid 140711106176768] [client 20.151.10.161:14874] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ap4ssmH227LtxadBWvPcNgAAAIc"]
[Sun Sep 06 22:17:06.580687 2026] [:error] [pid 16008:tid 140710997071616] [client 20.151.10.161:39590] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/block-bindings/"] [unique_id "ap4ssrIsH66sGUHG2NN0xAAAAZQ"]
[Sun Sep 06 22:17:06.793335 2026] [:error] [pid 23451:tid 140711209031424] [client 20.151.10.161:32802] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ap4ssmH227LtxadBWvPcNwAAAIM"]
[Sun Sep 06 22:17:07.010008 2026] [:error] [pid 23537:tid 140711080998656] [client 20.151.10.161:39558] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ap4ssxoDFJALYxXq6s2sSQAAAMo"]
[Sun Sep 06 22:17:07.213442 2026] [:error] [pid 23449:tid 140710980286208] [client 20.151.10.161:28859] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-admin/maint/index.php"] [unique_id "ap4ss2i7nVbCqCpvpuvmEwAAABY"]
[Sun Sep 06 22:17:07.415897 2026] [:error] [pid 23449:tid 140711080998656] [client 20.151.10.161:47362] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/qazwsx.php"] [unique_id "ap4ss2i7nVbCqCpvpuvmFAAAAAo"]
[Sun Sep 06 22:17:07.620759 2026] [:error] [pid 23451:tid 140710980286208] [client 20.151.10.161:47377] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cae2.2.php"] [unique_id "ap4ss2H227LtxadBWvPcOAAAAJY"]
[Sun Sep 06 22:17:07.854445 2026] [:error] [pid 23449:tid 140711097784064] [client 20.151.10.161:14909] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/b8.php"] [unique_id "ap4ss2i7nVbCqCpvpuvmFQAAAAg"]
[Sun Sep 06 22:17:08.059326 2026] [:error] [pid 23449:tid 140711217424128] [client 20.151.10.161:39672] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/uploads/"] [unique_id "ap4stGi7nVbCqCpvpuvmFgAAAAI"]
[Sun Sep 06 22:17:08.268351 2026] [:error] [pid 23451:tid 140711192246016] [client 20.151.10.161:32804] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp_blog_footer.php"] [unique_id "ap4stGH227LtxadBWvPcOQAAAIU"]
[Sun Sep 06 22:17:08.479435 2026] [:error] [pid 23451:tid 140711192246016] [client 20.151.10.161:47369] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/billzgs.php"] [unique_id "ap4stGH227LtxadBWvPcOgAAAIU"]
[Sun Sep 06 22:17:08.686770 2026] [:error] [pid 23449:tid 140711030642432] [client 20.151.10.161:32801] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/CAE-2.5.php"] [unique_id "ap4stGi7nVbCqCpvpuvmGAAAABA"]
[Sun Sep 06 22:17:08.896476 2026] [:error] [pid 23451:tid 140711047427840] [client 20.151.10.161:39581] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/0.php"] [unique_id "ap4stGH227LtxadBWvPcOwAAAI4"]
[Sun Sep 06 22:17:09.105762 2026] [:error] [pid 9772:tid 140711225816832] [client 20.151.10.161:39612] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ap4stadRhkOgzF_PKkjLawAAAUE"]
[Sun Sep 06 22:17:09.310606 2026] [:error] [pid 23537:tid 140711089391360] [client 20.151.10.161:47451] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/fms.php"] [unique_id "ap4stRoDFJALYxXq6s2sSwAAAMk"]
[Sun Sep 06 22:17:09.505437 2026] [:error] [pid 23449:tid 140710963500800] [client 20.151.10.161:39552] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/0day.php"] [unique_id "ap4stWi7nVbCqCpvpuvmGQAAABg"]
[Sun Sep 06 22:17:09.705614 2026] [:error] [pid 23451:tid 140711217424128] [client 20.151.10.161:14890] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cycfruf.php"] [unique_id "ap4stWH227LtxadBWvPcPQAAAII"]
[Sun Sep 06 22:17:09.915995 2026] [:error] [pid 23537:tid 140711030642432] [client 20.151.10.161:57058] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/adminan.php"] [unique_id "ap4stRoDFJALYxXq6s2sTAAAANA"]
[Sun Sep 06 22:17:10.125037 2026] [:error] [pid 9772:tid 140711013857024] [client 20.151.10.161:14904] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/css/dist/"] [unique_id "ap4stqdRhkOgzF_PKkjLbAAAAVI"]
[Sun Sep 06 22:17:10.335635 2026] [:error] [pid 23451:tid 140711209031424] [client 20.151.10.161:32828] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "ap4stmH227LtxadBWvPcPgAAAIM"]
[Sun Sep 06 22:17:10.539598 2026] [:error] [pid 23451:tid 140711209031424] [client 20.151.10.161:14908] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "ap4stmH227LtxadBWvPcPwAAAIM"]
[Sun Sep 06 22:17:10.767909 2026] [:error] [pid 23720:tid 140711106176768] [client 20.151.10.161:32810] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-act.php"] [unique_id "ap4stuxVGD-6vo_HLH60ywAAAQc"]
[Sun Sep 06 22:17:10.979860 2026] [:error] [pid 23720:tid 140711047427840] [client 20.151.10.161:39611] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/tymn.php"] [unique_id "ap4stuxVGD-6vo_HLH60zAAAAQ4"]
[Sun Sep 06 22:17:11.210255 2026] [:error] [pid 23720:tid 140711080998656] [client 20.151.10.161:19387] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/fvvff.php"] [unique_id "ap4st-xVGD-6vo_HLH60zQAAAQo"]
[Sun Sep 06 22:17:11.421837 2026] [:error] [pid 23449:tid 140711005464320] [client 20.151.10.161:39574] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/gssdd.php"] [unique_id "ap4st2i7nVbCqCpvpuvmGgAAABM"]
[Sun Sep 06 22:17:11.635038 2026] [:error] [pid 23449:tid 140710988678912] [client 20.151.10.161:30664] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/database.php"] [unique_id "ap4st2i7nVbCqCpvpuvmGwAAABU"]
[Sun Sep 06 22:17:11.843501 2026] [:error] [pid 23451:tid 140710963500800] [client 20.151.10.161:30669] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/sbhu.php"] [unique_id "ap4st2H227LtxadBWvPcQwAAAJg"]
[Sun Sep 06 22:17:12.051994 2026] [:error] [pid 23450:tid 140711064213248] [client 20.151.10.161:57074] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/kj.php"] [unique_id "ap4suJYh2hMCcoNUiXCzVgAAAEw"]
[Sun Sep 06 22:17:12.250160 2026] [:error] [pid 23451:tid 140711072605952] [client 20.151.10.161:14863] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/prv8.php"] [unique_id "ap4suGH227LtxadBWvPcRAAAAIs"]
[Sun Sep 06 22:17:12.457016 2026] [:error] [pid 23450:tid 140710971893504] [client 20.151.10.161:32785] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/re.php"] [unique_id "ap4suJYh2hMCcoNUiXCzVwAAAFc"]
[Sun Sep 06 22:17:12.657578 2026] [:error] [pid 23450:tid 140711106176768] [client 20.151.10.161:32800] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/cs.php"] [unique_id "ap4suJYh2hMCcoNUiXCzWAAAAEc"]
[Sun Sep 06 22:17:12.859113 2026] [:error] [pid 23451:tid 140711072605952] [client 20.151.10.161:57049] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/69R8Rs.php"] [unique_id "ap4suGH227LtxadBWvPcRQAAAIs"]
[Sun Sep 06 22:17:13.069257 2026] [:error] [pid 23451:tid 140711013857024] [client 20.151.10.161:32794] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/claw.php"] [unique_id "ap4suWH227LtxadBWvPcRgAAAJI"]
[Sun Sep 06 22:17:13.289948 2026] [:error] [pid 23449:tid 140711005464320] [client 20.151.10.161:39640] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-the.php"] [unique_id "ap4suWi7nVbCqCpvpuvmHAAAABM"]
[Sun Sep 06 22:17:13.500338 2026] [:error] [pid 23451:tid 140711055820544] [client 20.151.10.161:47399] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/66.php"] [unique_id "ap4suWH227LtxadBWvPcRwAAAI0"]
[Sun Sep 06 22:17:13.701426 2026] [:error] [pid 23451:tid 140711039035136] [client 20.151.10.161:39580] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/ioxi-o.php"] [unique_id "ap4suWH227LtxadBWvPcSAAAAI8"]
[Sun Sep 06 22:17:13.983852 2026] [:error] [pid 23449:tid 140711072605952] [client 20.151.10.161:39644] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/wp-access.php"] [unique_id "ap4suWi7nVbCqCpvpuvmHQAAAAs"]
[Sun Sep 06 22:17:14.197932 2026] [:error] [pid 23451:tid 140711072605952] [client 20.151.10.161:30670] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/forbidals.php"] [unique_id "ap4sumH227LtxadBWvPcSQAAAIs"]
[Sun Sep 06 22:17:14.419009 2026] [:error] [pid 23451:tid 140711022249728] [client 20.151.10.161:30678] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/X57.php"] [unique_id "ap4sumH227LtxadBWvPcSgAAAJE"]
[Sun Sep 06 22:17:14.625071 2026] [:error] [pid 23449:tid 140710988678912] [client 20.151.10.161:28858] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/grsiuk.php"] [unique_id "ap4sumi7nVbCqCpvpuvmHgAAABU"]
[Sun Sep 06 22:17:14.827988 2026] [:error] [pid 16008:tid 140711022249728] [client 20.151.10.161:32822] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/fs.php"] [unique_id "ap4surIsH66sGUHG2NN0xQAAAZE"]
[Sun Sep 06 22:17:15.051622 2026] [:error] [pid 23451:tid 140710997071616] [client 20.151.10.161:57067] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/xpwer1.php"] [unique_id "ap4su2H227LtxadBWvPcSwAAAJQ"]
[Sun Sep 06 22:17:15.264303 2026] [:error] [pid 23451:tid 140711055820544] [client 20.151.10.161:30672] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.pesema.com"] [uri "/c.php"] [unique_id "ap4su2H227LtxadBWvPcTAAAAI0"]
[Sun Sep 06 22:30:26.088725 2026] [:error] [pid 23449:tid 140711209031424] [client 43.157.43.147:33552] [client 43.157.43.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pesema.com"] [uri "/"] [unique_id "ap4v0mi7nVbCqCpvpuvrUwAAAAM"]
[Sun Sep 06 22:39:55.917087 2026] [authz_core:error] [pid 23451:tid 140711047427840] [client 34.150.188.237:61300] AH01630: client denied by server configuration: /home/pesema/public_html/xmlrpc.php
[Sun Sep 06 23:17:49.699299 2026] [:error] [pid 23450:tid 140711114569472] [client 101.33.80.42:47618] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "ap467ZYh2hMCcoNUiXDP3AAAAEY"]
[Sun Sep 06 23:59:06.843191 2026] [:error] [pid 23450:tid 140711039035136] [client 119.91.20.139:33968] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pesema.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pesema.com"] [uri "/"] [unique_id "ap5EmpYh2hMCcoNUiXDqgAAAAE8"]
[Mon Sep 07 00:34:46.663604 2026] [:error] [pid 23720:tid 140711097784064] [client 104.28.222.46:51970] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env"] [unique_id "ap5M9uxVGD-6vo_HLH7P9wAAAQg"], referer: https://www.google.com/search?q=www.pesema.com
[Mon Sep 07 00:34:46.665461 2026] [:error] [pid 23450:tid 140710980286208] [client 104.28.222.46:17422] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp-config.php.bak"] [unique_id "ap5M9pYh2hMCcoNUiXD-KAAAAFY"], referer: https://www.google.com/search?q=www.pesema.com
[Mon Sep 07 00:34:46.682484 2026] [:error] [pid 23451:tid 140711064213248] [client 104.28.222.47:55240] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.production"] [unique_id "ap5M9mH227LtxadBWvMDYwAAAIw"]
[Mon Sep 07 00:34:46.682698 2026] [:error] [pid 16008:tid 140711225816832] [client 104.28.222.46:29747] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/config"] [unique_id "ap5M9rIsH66sGUHG2NOQdwAAAYE"], referer: https://www.google.com/search?q=www.pesema.com
[Mon Sep 07 00:34:46.683905 2026] [:error] [pid 18776:tid 140710963500800] [client 104.28.222.47:64710] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/wp-config.php"] [unique_id "ap5M9gDwOIgJaZ-zFcxO4wAAAdg"]
[Mon Sep 07 00:34:46.683960 2026] [:error] [pid 23451:tid 140711089391360] [client 104.28.254.46:20517] [client 104.28.254.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.git/HEAD"] [unique_id "ap5M9mH227LtxadBWvMDZAAAAIk"], referer: https://www.google.com/search?q=www.pesema.com
[Mon Sep 07 00:34:46.684432 2026] [:error] [pid 23451:tid 140711200638720] [client 104.28.254.47:59031] [client 104.28.254.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.dist"] [unique_id "ap5M9mH227LtxadBWvMDZQAAAIQ"], referer: https://www.google.com/search?q=www.pesema.com
[Mon Sep 07 00:34:46.685141 2026] [:error] [pid 18776:tid 140711097784064] [client 104.28.222.46:62696] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.sample"] [unique_id "ap5M9gDwOIgJaZ-zFcxO5AAAAcg"], referer: https://www.google.com/search?q=www.pesema.com
[Mon Sep 07 00:34:46.685326 2026] [:error] [pid 18776:tid 140711089391360] [client 104.28.254.47:51043] [client 104.28.254.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.save"] [unique_id "ap5M9gDwOIgJaZ-zFcxO5QAAAck"]
[Mon Sep 07 00:34:46.686480 2026] [:error] [pid 23451:tid 140711234209536] [client 104.28.254.46:16814] [client 104.28.254.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.local"] [unique_id "ap5M9mH227LtxadBWvMDZgAAAIA"]
[Mon Sep 07 00:34:46.689614 2026] [:error] [pid 18776:tid 140711022249728] [client 104.28.254.46:26288] [client 104.28.254.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.bak"] [unique_id "ap5M9gDwOIgJaZ-zFcxO5gAAAdE"], referer: https://www.google.com/search?q=www.pesema.com
[Mon Sep 07 00:34:46.698186 2026] [:error] [pid 18776:tid 140711064213248] [client 104.28.254.46:38590] [client 104.28.254.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.old"] [unique_id "ap5M9gDwOIgJaZ-zFcxO5wAAAcw"]
[Mon Sep 07 00:34:46.727167 2026] [:error] [pid 23450:tid 140711022249728] [client 104.28.254.47:41168] [client 104.28.254.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.test"] [unique_id "ap5M9pYh2hMCcoNUiXD-KgAAAFE"]
[Mon Sep 07 00:34:46.735706 2026] [:error] [pid 18776:tid 140711039035136] [client 104.28.222.47:24643] [client 104.28.222.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.backup"] [unique_id "ap5M9gDwOIgJaZ-zFcxO6AAAAc8"], referer: https://www.google.com/search?q=www.pesema.com
[Mon Sep 07 00:34:47.361694 2026] [:error] [pid 18776:tid 140711106176768] [client 104.28.222.46:13731] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.production.local"] [unique_id "ap5M9wDwOIgJaZ-zFcxO6QAAAcc"]
[Mon Sep 07 00:34:47.383300 2026] [:error] [pid 23451:tid 140711217424128] [client 104.28.222.46:62398] [client 104.28.222.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pesema.com"] [uri "/.env.development.local"] [unique_id "ap5M92H227LtxadBWvMDaAAAAII"], referer: https://www.google.com/search?q=www.pesema.com