Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[ThuNov1220:02:05.7825092026][security2:error][pid1750248:tid1750288][client34.95.34.79:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchedphrase\"proc/self/\"atARGS_NAMES:\<\?phpechoshell_exec\(\'env2\>/dev/null\|\|set2\>nul\;cat/proc/self/envir ...
show more[ThuNov1220:02:05.7825092026][security2:error][pid1750248:tid1750288][client34.95.34.79:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchedphrase\"proc/self/\"atARGS_NAMES:\<\?phpechoshell_exec\(\'env2\>/dev/null\|\|set2\>nul\;cat/proc/self/environ2\>/dev/null\;cat/proc/1/environ2\>/dev/null\;cat\~/.aws/credentials2\>/dev/null\;cat\~/.aws/config2\>/dev/null\;cat\~/.boto2\>/dev/null\;cat/etc/boto.cfg2\>/dev/null\;cat\~/.s3cfg2\>/dev/null\;cat.env2\>/dev/null\;cat/app/.env2\>/dev/null\;cat.env.local2\>/dev/null\;cat.env.production2\>/dev/null\;catdocker-compose.yml2\>/dev/null\;cat\~/.config/gcloud/application_default_credentials.json2\>/dev/null\'\)\;die\(\)\;\?\>.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"135\"][id\"344360\"][rev\"5\"][msg\"Atomicorp.comWAFRules:UnauthorizedOperatingSystemFileAccessAttempt\"][data\"MatchedData:proc/self/foundwithinARGS_NAMES:\<\?phpechoshell_exec\(\'env2\>/dev/null\|\|set2\>nul\;cat/proc/self/environ2\>/dev/null\;cat/proc/1/environ2\>/dev/null\;cat
show less
