(modsecurity) srv101 ModSecurity 34.39.145.198 (BR/Brazil/198.145.39.34.bc.googleusercontent.com): 1 ...
show more(modsecurity) srv101 ModSecurity 34.39.145.198 (BR/Brazil/198.145.39.34.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Aggressive web search of vulnerable pages: /api/.env /frontend/.env /frontend/.env.local /.env.local ...
show moreAggressive web search of vulnerable pages: /api/.env /frontend/.env /frontend/.env.local /.env.local /backend/api/.env ...
show less
[MonJun1501:27:39.2758202026][security2:error][pid3433961:tid3433976][client34.39.145.198:0]ModSecur ...
show more[MonJun1501:27:39.2758202026][security2:error][pid3433961:tid3433976][client34.39.145.198:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"mood4apps.com.136-243-54-122.cpanel.site\"][uri\"/production/.env\"][unique_id\"ai846_VHKKAbdH2Vu-gHKwAAAAs\"]
show less